Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.275·Published 2020-01-02·Fixed in 4.37CWE-787
Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.02488·Published 2020-01-02·Fixed in 4.37CWE-787