CVE-2024-44913

An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS).

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - cve@mitre.org

Published

2024-08-28

Last modified

2024-08-28

Weaknesses

CWE-284

Affected products

• Exr (Irfanview)
• Irfanview (Irfanview)

References

• https://github.com/yuhano/irfanview_Poc