CVE-2013-3944 - Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag

Back Back to CVE browser

HIGH

Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag

Published Jan 2, 2020

7.8

HIGH

CVSS 3.1

EPSS 27.50%

Description

Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.

Affected products

Vendor IrfanView Product MrSID plugin Default
n/a
- Version
  before 4.37
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IrfanView

MrSID plugin

n/a

Version	Status	Constraints
before 4.37	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

http://www.securityfocus.com/bid/64385
x_refsource_MISCThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89804
x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.irfanview.com/history_old.htm
x_refsource_CONFIRMRelease Notes

Link	Providers	Tags
http://www.securityfocus.com/bid/64385		x_refsource_MISCThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/89804		x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.irfanview.com/history_old.htm		x_refsource_CONFIRMRelease Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Jan 2, 2020

Updated Aug 6, 2024

Reserved Jun 4, 2013

Link CVE-2013-3944

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-3944

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-3944