CVE-2008-1461

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.

Link	Resource
http://www.click-internet.fr/index.php?cki=News&news=9	Exploit
http://www.securityfocus.com/bid/28259	Exploit
http://securityreason.com/securityalert/3761	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41245
http://www.securityfocus.com/archive/1/489658/100/0/threaded

Configuration 1

cpe:2.3:a:xnview:xnview:1.92.1:*:*:*:*:*:*:*

---

Published : 2008-03-24 06:44

Updated : 2018-10-11 08:34

---

NVD link : CVE-2008-1461

Mitre link : CVE-2008-1461

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer