Vulnerability Database

296,223

Total vulnerabilities in the database

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.

  • Published: Jul 11, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-1338
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
xnview / xnview 1.80.1 1.80.1.x
xnview / xnview 1.80.3 1.80.3.x
xnview / xnview - 1.98.x
xnview / xnview 1.80 1.80.x
xnview / xnview 1.74 1.74.x
xnview / xnview 1.82 1.82.x
xnview / xnview 1.80.2 1.80.2.x