CVE-2013-3946

Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.

Score

CVSS 3.1 7.8 High

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2020-01-02

Last modified

2024-08-06

Weaknesses

CWE-787

Affected products

• Mrsid (Extensis)
• Mrsid Plugin (Irfanview)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/89806
• https://www.irfanview.com/history_old.htm