Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.6
CVSSv2

CVE-2008-1461

Published: 24/03/2008 Updated: 11/10/2018
CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9
VMScore: 765
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Subscribe to Xnview

Vulnerability Summary

Buffer overflow in XnView 1.92.1 allows user-assisted remote malicious users to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.

Vulnerable Product Search on Vulmon Subscribe to Product

xnview xnview 1.92.1

Exploits

Exploit DB: XnView 1.92.1 - Command-Line Arguments Buffer Overflow
source: wwwsecurityfocuscom/bid/28259/info XnView is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer Attackers may exploit this issue only if XnView is configured as a handler for other applications, so that it can be passed m ...

References

CWE-119http://www.click-internet.fr/index.php?cki=News&news=9http://www.securityfocus.com/bid/28259http://securityreason.com/securityalert/3761https://exchange.xforce.ibmcloud.com/vulnerabilities/41245http://www.securityfocus.com/archive/1/489658/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/31405/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook