CVE-2008-3904: Improper Input Validation

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

CVE-2008-3791: Improper Link Resolution Before File Access

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file...