CVE-2013-3944

Опубликовано: 02 янв. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.

Ссылки

http://www.securityfocus.com/bid/64385
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89804
Third Party Advisory
VDB Entry
https://www.irfanview.com/history_old.htm
Release Notes
http://www.securityfocus.com/bid/64385
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89804
Third Party Advisory
VDB Entry
https://www.irfanview.com/history_old.htm
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:extensis:mrsid:*:*:*:*:*:irfanview:*:*

Версия до 4.37 (исключая)

EPSS

Процентиль: 91%

0.06339

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-f2wr-35r3-8hpq

github

почти 4 года назад