CVE-2013-3945

The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.

Score

CVSS 3.1 7.8 High

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2020-01-02

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Mrsid (Extensis)
• Mrsid Plugin (Irfanview)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/89805
• https://www.irfanview.com/history_old.htm