OSVDB ID: 22094 Title: XnView RPATH Subversion Local Privilege Escalation |
Info |
|
|
Dates |
||||
|
|
Description |
XnView contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue caused by an insecure RPATH and is triggered when the application is launched within a shared directory containing a malicious library. This flaw may lead to a loss of confidentiality or integrity through arbitrary code execution. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Gentoo users should upgrade to version 1.70-r1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. Currently, there are no known upgrades, patches, or workarounds available to correct this issue of other systems. |
Products |
|
References |
|
Credit |
|