PT-2005-5263 · Xnsoft+1 · Xnview+1

Krzysiek Pawlik · Publicado 2005-12-31 · Atualizado 2017-07-20 · CVE-2005-4595

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XnView version 1.70 NView version 4.51

Description The issue is related to an untrusted search path vulnerability, specifically an RPATH vulnerability, which allows local users to execute arbitrary code. This can be achieved by placing a malicious library in the current working directory.

Recommendations For XnView version 1.70, update to a version that fixes the RPATH vulnerability. For NView version 4.51, update to a version that fixes the RPATH vulnerability. As a temporary workaround, consider restricting the execution of libraries from untrusted sources in the current working directory until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4595

Produtos afetados

Nview

Xnview

Referências · 9

• https://exchange.xforce.ibmcloud.com/vulnerabilities/23910 · Nota
• http://gentoo.org/security/en/glsa/glsa-200512-18.xml · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4595 · Nota de Segurança
• http://secunia.com/advisories/18240 · Aviso do Fabricante
• http://osvdb.org/22093 · Nota
• http://secunia.com/advisories/18235 · Aviso do Fabricante
• http://bugs.gentoo.org/show_bug.cgi?id=117063 · Nota
• http://osvdb.org/22094 · Nota
• http://securityfocus.com/bid/16087 · Correção