CVE-2008-1461

XnView 1.92.1 - RCE

Title source: llm

Description

Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Sylvain THUAL · cremotewindows

https://www.exploit-db.com/exploits/31405

View Code ZIP pw:eip

References (5)

[Exploit] http://securityreason.com/securityalert/3761

[Exploit] http://www.click-internet.fr/index.php?cki=News&news=9

[Exploit] http://www.securityfocus.com/bid/28259

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41245

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/489658/100/0/threaded

Scores

EPSS 0.0490

EPSS Percentile 89.6%

Details

CWE

CWE-119

Status published

Products (1)

xnview/xnview 1.92.1

Published Mar 24, 2008

Tracked Since Feb 18, 2026