CVEvulnerability

CVE-2011-1338

6.9 MEDIUM Published 2011-07-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-07-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.

Affected configurations

• xnview xnview (<= 1.98) • xnview xnview 1.74 • xnview xnview 1.80 • xnview xnview 1.80.1 • xnview xnview 1.80.2 • xnview xnview 1.80.3 • xnview xnview 1.82

References