Vendors / IrfanView Records 384 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 11
CVSS high 349
Exploited now IrfanView records in CISA KEV No IrfanView vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer o…
CVSS 2.0 HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04756 · Published 2009-04-09 · No fix listed CWE-189
Priority LOW 37
IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00509 · Published 2024-11-22 · No fix listed CWE-787
Priority LOW 37
IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00501 · Published 2024-11-22 · No fix listed CWE-122
Priority LOW 37
IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00509 · Published 2024-11-22 · No fix listed CWE-787
Priority LOW 37
IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00509 · Published 2024-11-22 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
11 349 22 2 0
