CVE-2008-3904

Description

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

Affected Platforms

Weakness Type

CWE-20

References

• http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845
• http://www.openwall.com/lists/oss-security/2008/08/30/1
• http://www.openwall.com/lists/oss-security/2008/09/03/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45137
• http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845
• http://www.openwall.com/lists/oss-security/2008/08/30/1