CVE-2008-3904
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lxde:gpicview
- lxde:lightweight_x11_desktop_environment
References
- http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845
- http://www.openwall.com/lists/oss-security/2008/08/30/1
- http://www.openwall.com/lists/oss-security/2008/09/03/1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45137
- http://lxde.svn.sourceforge.net/viewvc/lxde?view=rev&sortby=date&revision=845