CVE-2008-3904: Lxde Gpicview

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

Affected products

• Lxde Gpicview: version 0.1.9 only
• Lxde Lightweight x11 Desktop Environment: any version

Published 2008-09-04. Last modified 2026-06-16.