CVE-2011-1338

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-07-11 · updated 2026-06-16

Description

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item.

Affected products

XnView: through 1.98; 1.74, 1.80, 1.80.1, 1.80.2, 1.80.3, 1.82

References

http://jvn.jp/en/jp/JVN17844633/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050
http://secunia.com/advisories/45127
http://www.osvdb.org/73619
http://www.securityfocus.com/bid/48562
https://exchange.xforce.ibmcloud.com/vulnerabilities/68369
http://jvn.jp/en/jp/JVN17844633/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000050
http://secunia.com/advisories/45127
http://www.osvdb.org/73619
http://www.securityfocus.com/bid/48562
https://exchange.xforce.ibmcloud.com/vulnerabilities/68369

Get alerted when CVE-2011-1338 or the next vulnerability affects your stack