Lucene search

FlexeraCVE-2013-3945

HistoryJan 02, 2020 - 7:15 p.m.

CVE-2013-3945

2020-01-0219:15:11

CWE-20

flexera

web.nvd.nist.gov

cve-2013-3945

mrsid plugin

irfanview

remote code execution

nband tag

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.6%

JSON

The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.

Affected configurations

Nvd

Node

extensismrsidRange<4.37irfanview

VendorProductVersionCPE
extensismrsid*cpe:2.3:a:extensis:mrsid:*:*:*:*:*:irfanview:*:*

Vendor	Product	Version	CPE
extensis	mrsid	*	cpe:2.3:a:extensis:mrsid::::::irfanview::*

CNA Affected

[
  {
    "product": "MrSID plugin",
    "vendor": "IrfanView",
    "versions": [
      {
        "status": "affected",
        "version": "before 4.37"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/89805

www.irfanview.com/history_old.htm

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.6%

JSON

Related for CVE-2013-3945