Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the Open containing folder menu item.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xnview | Xnview | * | 1.98 (including) |
| Xnview | Xnview | 1.74 (including) | 1.74 (including) |
| Xnview | Xnview | 1.80 (including) | 1.80 (including) |
| Xnview | Xnview | 1.80.1 (including) | 1.80.1 (including) |
| Xnview | Xnview | 1.80.2 (including) | 1.80.2 (including) |
| Xnview | Xnview | 1.80.3 (including) | 1.80.3 (including) |
| Xnview | Xnview | 1.82 (including) | 1.82 (including) |