Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the Open containing folder menu item.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xnview | Xnview | * | 1.98 (including) |
| Xnview | Xnview | 1.74 (including) | 1.74 (including) |
| Xnview | Xnview | 1.80 (including) | 1.80 (including) |
| Xnview | Xnview | 1.80.1 (including) | 1.80.1 (including) |
| Xnview | Xnview | 1.80.2 (including) | 1.80.2 (including) |
| Xnview | Xnview | 1.80.3 (including) | 1.80.3 (including) |
| Xnview | Xnview | 1.82 (including) | 1.82 (including) |
References
- http://jvn.jp/en/jp/JVN17844633/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050
- http://secunia.com/advisories/45127
- http://www.osvdb.org/73619
- http://www.securityfocus.com/bid/48562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68369
- http://jvn.jp/en/jp/JVN17844633/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050
- http://secunia.com/advisories/45127
- http://www.osvdb.org/73619
- http://www.securityfocus.com/bid/48562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68369