Lucene search
HistoryApr 04, 2023 - 4:15 p.m.
CVE-2023-26974
irfanview
cve-2023-26974
user mode
write access violation
jpeg 2000
nvd
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.7%
Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.
Affected configurations
Node
irfanviewirfanviewMatch4.62
| CPE | Name | Operator | Version |
|---|---|---|---|
| irfanview:irfanview | irfanview | eq | 4.62 |
References
Related
nvd
nvd
CVE-2023-26974
2023-04-04 16:15:07
prion
prion
Code injection
2023-04-04 16:15:00
cvelist
cvelist
CVE-2023-26974
2023-04-04 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.7%
Related for CVE-2023-26974