CVE-2008-0069: Pierreegougelet Xnview

Medium severity, CVSS 6.8. EPSS: 8.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName parameter in a slideshow (.sld) file, a different vector than CVE-2008-1461.

Affected products

• Pierreegougelet Xnview: up to and including 1.92; up to and including 1.92.1

Published 2008-04-02. Last modified 2026-06-16.