Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Extensis Component: Mrsid Clear all filters
TI-2013-03446 CVE-2013-3944 · GHSA-f2wr-35r3-8hpq

Out-of-bounds write in IrfanView MrSID plugin

Priority MEDIUM 56

Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.275 Published 2020-01-02 Fixed in 4.37 CWE-787
TI-2013-03447 CVE-2013-3945 · GHSA-j2q9-fp38-97q8

Improper input validation in IrfanView MrSID plugin

Priority LOW 38

The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02071 Published 2020-01-02 Fixed in 4.37 CWE-20
TI-2013-03448 CVE-2013-3946 · GHSA-ph62-xvw6-h88g

Out-of-bounds write in IrfanView MrSID plugin

Priority LOW 39

Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02488 Published 2020-01-02 Fixed in 4.37 CWE-787