Read the docs
TI-2012-04929 Aliases CVE-2012-5904GHSA-2g2v-frmf-48r9

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute…

Priority LOW 39CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.

Why it matters now

EPSS 0.05733 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 82

CPEVersionsRoleVendor
cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*up to 4.32VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.70:*:*:*:*:*:*:*1.70VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.80:*:*:*:*:*:*:*1.80VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.85:*:*:*:*:*:*:*1.85VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.90:*:*:*:*:*:*:*1.90VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.95:*:*:*:*:*:*:*1.95VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.97:*:*:*:*:*:*:*1.97VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.98:*:*:*:*:*:*:*1.98VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.98a:*:*:*:*:*:*:*1.98aVulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:1.99:*:*:*:*:*:*:*1.99VulnerableIrfanView
  • cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:* Versions up to 4.32 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.70:*:*:*:*:*:*:* Versions 1.70 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.80:*:*:*:*:*:*:* Versions 1.80 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.85:*:*:*:*:*:*:* Versions 1.85 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.90:*:*:*:*:*:*:* Versions 1.90 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.95:*:*:*:*:*:*:* Versions 1.95 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.97:*:*:*:*:*:*:* Versions 1.97 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.98:*:*:*:*:*:*:* Versions 1.98 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.98a:*:*:*:*:*:*:* Versions 1.98a Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:1.99:*:*:*:*:*:*:* Versions 1.99 Vulnerable ·IrfanView
Show 72 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:irfanview:irfanview:2.00:*:*:*:*:*:*:*2.00VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.05:*:*:*:*:*:*:*2.05VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.07:*:*:*:*:*:*:*2.07VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.10:*:*:*:*:*:*:*2.10VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.12:*:*:*:*:*:*:*2.12VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.15:*:*:*:*:*:*:*2.15VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.17:*:*:*:*:*:*:*2.17VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.18:*:*:*:*:*:*:*2.18VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.20:*:*:*:*:*:*:*2.20VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.22:*:*:*:*:*:*:*2.22VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.25:*:*:*:*:*:*:*2.25VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.27:*:*:*:*:*:*:*2.27VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.30:*:*:*:*:*:*:*2.30VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.32:*:*:*:*:*:*:*2.32VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.35:*:*:*:*:*:*:*2.35VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.37:*:*:*:*:*:*:*2.37VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.40:*:*:*:*:*:*:*2.40VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.50:*:*:*:*:*:*:*2.50VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.52:*:*:*:*:*:*:*2.52VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.55:*:*:*:*:*:*:*2.55VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.60:*:*:*:*:*:*:*2.60VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.63:*:*:*:*:*:*:*2.63VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.65:*:*:*:*:*:*:*2.65VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.66:*:*:*:*:*:*:*2.66VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.68:*:*:*:*:*:*:*2.68VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.80:*:*:*:*:*:*:*2.80VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.82:*:*:*:*:*:*:*2.82VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.83:*:*:*:*:*:*:*2.83VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.85:*:*:*:*:*:*:*2.85VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.90:*:*:*:*:*:*:*2.90VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.92:*:*:*:*:*:*:*2.92VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.95:*:*:*:*:*:*:*2.95VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.97:*:*:*:*:*:*:*2.97VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:2.98:*:*:*:*:*:*:*2.98VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.00:*:*:*:*:*:*:*3.00VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.02:*:*:*:*:*:*:*3.02VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.05:*:*:*:*:*:*:*3.05VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.07:*:*:*:*:*:*:*3.07VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.10:*:*:*:*:*:*:*3.10VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.12:*:*:*:*:*:*:*3.12VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.15:*:*:*:*:*:*:*3.15VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.17:*:*:*:*:*:*:*3.17VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.20:*:*:*:*:*:*:*3.20VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.21:*:*:*:*:*:*:*3.21VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.25:*:*:*:*:*:*:*3.25VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.30:*:*:*:*:*:*:*3.30VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.33:*:*:*:*:*:*:*3.33VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.35:*:*:*:*:*:*:*3.35VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.36:*:*:*:*:*:*:*3.36VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.50:*:*:*:*:*:*:*3.50VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.51:*:*:*:*:*:*:*3.51VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.60:*:*:*:*:*:*:*3.60VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.61:*:*:*:*:*:*:*3.61VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.70:*:*:*:*:*:*:*3.70VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.75:*:*:*:*:*:*:*3.75VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.80:*:*:*:*:*:*:*3.80VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.85:*:*:*:*:*:*:*3.85VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.90:*:*:*:*:*:*:*3.90VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.91:*:*:*:*:*:*:*3.91VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.92:*:*:*:*:*:*:*3.92VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.95:*:*:*:*:*:*:*3.95VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.97:*:*:*:*:*:*:*3.97VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*3.98VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:3.99:*:*:*:*:*:*:*3.99VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*4.00VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*4.10VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*4.20VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*4.23VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.25:*:*:*:*:*:*:*4.25VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.27:*:*:*:*:*:*:*4.27VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.28:*:*:*:*:*:*:*4.28VulnerableIrfanView
cpe:2.3:a:irfanview:irfanview:4.30:*:*:*:*:*:*:*4.30VulnerableIrfanView
  • cpe:2.3:a:irfanview:irfanview:2.00:*:*:*:*:*:*:* Versions 2.00 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.05:*:*:*:*:*:*:* Versions 2.05 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.07:*:*:*:*:*:*:* Versions 2.07 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.10:*:*:*:*:*:*:* Versions 2.10 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.12:*:*:*:*:*:*:* Versions 2.12 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.15:*:*:*:*:*:*:* Versions 2.15 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.17:*:*:*:*:*:*:* Versions 2.17 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.18:*:*:*:*:*:*:* Versions 2.18 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.20:*:*:*:*:*:*:* Versions 2.20 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.22:*:*:*:*:*:*:* Versions 2.22 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.25:*:*:*:*:*:*:* Versions 2.25 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.27:*:*:*:*:*:*:* Versions 2.27 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.30:*:*:*:*:*:*:* Versions 2.30 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.32:*:*:*:*:*:*:* Versions 2.32 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.35:*:*:*:*:*:*:* Versions 2.35 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.37:*:*:*:*:*:*:* Versions 2.37 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.40:*:*:*:*:*:*:* Versions 2.40 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.50:*:*:*:*:*:*:* Versions 2.50 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.52:*:*:*:*:*:*:* Versions 2.52 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.55:*:*:*:*:*:*:* Versions 2.55 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.60:*:*:*:*:*:*:* Versions 2.60 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.63:*:*:*:*:*:*:* Versions 2.63 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.65:*:*:*:*:*:*:* Versions 2.65 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.66:*:*:*:*:*:*:* Versions 2.66 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.68:*:*:*:*:*:*:* Versions 2.68 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.80:*:*:*:*:*:*:* Versions 2.80 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.82:*:*:*:*:*:*:* Versions 2.82 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.83:*:*:*:*:*:*:* Versions 2.83 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.85:*:*:*:*:*:*:* Versions 2.85 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.90:*:*:*:*:*:*:* Versions 2.90 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.92:*:*:*:*:*:*:* Versions 2.92 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.95:*:*:*:*:*:*:* Versions 2.95 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.97:*:*:*:*:*:*:* Versions 2.97 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:2.98:*:*:*:*:*:*:* Versions 2.98 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.00:*:*:*:*:*:*:* Versions 3.00 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.05:*:*:*:*:*:*:* Versions 3.05 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.07:*:*:*:*:*:*:* Versions 3.07 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.15:*:*:*:*:*:*:* Versions 3.15 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.17:*:*:*:*:*:*:* Versions 3.17 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.20:*:*:*:*:*:*:* Versions 3.20 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.21:*:*:*:*:*:*:* Versions 3.21 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.25:*:*:*:*:*:*:* Versions 3.25 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.30:*:*:*:*:*:*:* Versions 3.30 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.33:*:*:*:*:*:*:* Versions 3.33 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.35:*:*:*:*:*:*:* Versions 3.35 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.36:*:*:*:*:*:*:* Versions 3.36 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.50:*:*:*:*:*:*:* Versions 3.50 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.51:*:*:*:*:*:*:* Versions 3.51 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.60:*:*:*:*:*:*:* Versions 3.60 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.61:*:*:*:*:*:*:* Versions 3.61 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.70:*:*:*:*:*:*:* Versions 3.70 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.75:*:*:*:*:*:*:* Versions 3.75 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.80:*:*:*:*:*:*:* Versions 3.80 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.85:*:*:*:*:*:*:* Versions 3.85 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.90:*:*:*:*:*:*:* Versions 3.90 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.91:*:*:*:*:*:*:* Versions 3.91 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.92:*:*:*:*:*:*:* Versions 3.92 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.95:*:*:*:*:*:*:* Versions 3.95 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.97:*:*:*:*:*:*:* Versions 3.97 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:* Versions 3.98 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:3.99:*:*:*:*:*:*:* Versions 3.99 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:* Versions 4.00 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:* Versions 4.10 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:* Versions 4.20 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:* Versions 4.23 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.25:*:*:*:*:*:*:* Versions 4.25 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.27:*:*:*:*:*:*:* Versions 4.27 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.28:*:*:*:*:*:*:* Versions 4.28 Vulnerable ·IrfanView
  • cpe:2.3:a:irfanview:irfanview:4.30:*:*:*:*:*:*:* Versions 4.30 Vulnerable ·IrfanView

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5904
  2. 2026-10-03 Alias added: GHSA-2g2v-frmf-48r9

References

Other 2

  • TI-2012-00824 Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33… CVSS 2.0MEDIUM 6.8
  • TI-2023-11851 Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file… CVSS 3.1MEDIUM 5.5
  • TI-2007-01790 Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a… CVSS 2.0HIGH 10.0
  • TI-2008-00465 fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to… CVSS 2.0HIGH 9.3
  • TI-2007-01870 Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of… CVSS 2.0HIGH 9.3
  • TI-2007-02281 Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to… CVSS 2.0HIGH 8.5
See all 270 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences