Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
1 vulnerability found for XnView by XnSoft
JVNDB-2011-000050
Vulnerability from jvndb - Published: 2011-07-05 07:56 - Updated:2011-07-05 07:56Summary
XnView may insecurely load executable files
Details
XnView may use unsafe methods for determining how to load executables (.exe)
XnView is a software for viewing and converting graphic files. XnView loads certain executables when using the "Open containing folder" function. XnView contains an issue with the file search path, which may insecurely load executables.
Makoto Shiotsuki reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000050.html",
"dc:date": "2011-07-05T16:56+09:00",
"dcterms:issued": "2011-07-05T16:56+09:00",
"dcterms:modified": "2011-07-05T16:56+09:00",
"description": "XnView may use unsafe methods for determining how to load executables (.exe)\r\n\r\nXnView is a software for viewing and converting graphic files. XnView loads certain executables when using the \"Open containing folder\" function. XnView contains an issue with the file search path, which may insecurely load executables.\r\n\r\nMakoto Shiotsuki reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000050.html",
"sec:cpe": {
"#text": "cpe:/a:xnview:xnview",
"@product": "XnView",
"@vendor": "XnSoft",
"@version": "2.2"
},
"sec:cvss": {
"@score": "5.1",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2011-000050",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN17844633/index.html",
"@id": "JVN#17844633",
"@source": "JVN"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1338",
"@id": "CVE-2011-1338",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1338",
"@id": "CVE-2011-1338",
"@source": "NVD"
},
{
"#text": "http://secunia.com/advisories/45127",
"@id": "SA45127",
"@source": "SECUNIA"
},
{
"#text": "http://www.securityfocus.com/bid/48562",
"@id": "48562",
"@source": "BID"
},
{
"#text": "http://xforce.iss.net/xforce/xfdb/68369",
"@id": "68369",
"@source": "XF"
},
{
"#text": "http://osvdb.org/73619",
"@id": "73619",
"@source": "OSVDB"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "XnView may insecurely load executable files"
}