Lucene search

K
cve[email protected]CVE-2013-6932
HistoryDec 28, 2013 - 4:53 a.m.

CVE-2013-6932

2013-12-2804:53:06
CWE-119
web.nvd.nist.gov
29
cve-2013-6932
buffer overflow
irfanview
remote code execution
nvd

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window.

Affected configurations

NVD
Node
irfanviewirfanviewRange≀4.36
OR
irfanviewirfanviewMatch4.00
OR
irfanviewirfanviewMatch4.10
OR
irfanviewirfanviewMatch4.20
OR
irfanviewirfanviewMatch4.23
OR
irfanviewirfanviewMatch4.25
OR
irfanviewirfanviewMatch4.27
OR
irfanviewirfanviewMatch4.28
OR
irfanviewirfanviewMatch4.30
OR
irfanviewirfanviewMatch4.32
OR
irfanviewirfanviewMatch4.33
OR
irfanviewirfanviewMatch4.35

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.047 Low

EPSS

Percentile

92.7%