CVE-2008-1461: Buffer Overflow
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1461?
CVE-2008-1461 is considered to be a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2008-1461?
To fix CVE-2008-1461, you should upgrade to a patched version of XnView that addresses this buffer overflow issue.
Who is affected by CVE-2008-1461?
Users of XnView version 1.92.1 are affected by CVE-2008-1461, particularly those using command line arguments with long filenames.
What systems are vulnerable to CVE-2008-1461?
CVE-2008-1461 affects systems running XnView version 1.92.1 on any platform.
Can CVE-2008-1461 be exploited remotely?
Yes, CVE-2008-1461 can be exploited remotely if a user is tricked into executing a crafted command containing a long filename.