CVE-2008-3904

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-09-04

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Gpicview (Lxde)
• Lightweight X11 Desktop Environment (Lxde)

References

• http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845
• http://www.openwall.com/lists/oss-security/2008/08/30/1
• http://www.openwall.com/lists/oss-security/2008/09/03/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45137