Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

TI-2024-05450 CVE-2024-5877 · GHSA-2j6g-q9hc-mfr7

Out-of-bounds write in IrfanView

Priority LOW 37

IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00509 Published 2024-11-22 No fix listed CWE-787
TI-2024-05449 CVE-2024-5876 · GHSA-vxp2-h5r5-jv9j

Heap-based buffer overflow in IrfanView

Priority LOW 37

IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00501 Published 2024-11-22 No fix listed CWE-122
TI-2024-05448 CVE-2024-5875 · GHSA-62qp-pqg5-cf39

Out-of-bounds write in IrfanView

Priority LOW 37

IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00509 Published 2024-11-22 No fix listed CWE-787
TI-2024-05447 CVE-2024-5874 · GHSA-fmj7-4v6q-8867

Out-of-bounds write in IrfanView

Priority LOW 37

IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00509 Published 2024-11-22 No fix listed CWE-787
Priority MEDIUM 48

Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer o…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04756 Published 2009-04-09 No fix listed CWE-189