If your using XnView before version 1.98.8 you should have a look here.
http://secunia.com/advisories/47388/

I only have 1.98; haven't upgraded in a long time now. Hope XnView get's the required patches soon. Sad. I guess there is no such thing as an application without some exploit.

Interesting,

2 of the three vulnerabilities relate to "specially crafted" FPX and PCX files. I guess I will have to avoid those types in future.
The third "user browses a folder from an extracted archive file" - I will have to avoid doing that as well.

For all three "Successful exploitation of the vulnerabilities allows execution of arbitrary code, but requires tricking a user into opening a malicious file"

I will have to avoid said tricks.

I wonder if the same applies to the newer XnViewMP?

edit: and another thought, if the dodgy file is opened in Gimp, and shelled out to XnView, it will be as a proxy file and not a danger, am I correct in saying that?

XnViewMP is not newer and still in beta. It's seems to be on a slow development cycle. I haven't seen an update since, fall 2011. XnView v1.98.8 is the current, stable version.

What's different in XnView MP
http://newsgroup.xnview.com/viewtopic.php?f=60&t=23940

Since shellout uses PNG, I don't see an issue then so now I feel safer again. lol

Still, I hope they patch this one soon. Knowing an exploit is a call to arms imo since now more idiots will try to create exploits once made public.

i have the last version but i would be no worried in any case:
till now i didn't have any occasion to open FPX or PCX files, i didn't even know they exist before