Lucene search

K
cve[email protected]CVE-2007-4343
HistoryOct 16, 2007 - 11:17 p.m.

CVE-2007-4343

2007-10-1623:17:00
CWE-119
web.nvd.nist.gov
16
cve-2007-4343
buffer overflow
irfanview
remote code execution
nvd

8.2 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.071 Low

EPSS

Percentile

93.9%

Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) file.

8.2 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.071 Low

EPSS

Percentile

93.9%

Related for CVE-2007-4343