Vulnerability in Xnview

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

Affected products

Xnview — versions 1.74, 1.80, 1.80.1
N/a — versions n/a

References

vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)
vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)