CVE-2013-6932
Published Dec 28, 2013
Last updated 11 years ago
Overview
- Description
- Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.6
- Impact score
- 10
- Exploitability score
- 4.9
- Vector string
- AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74420D72-9C49-47BE-8AB7-28469088584D",
"versionEndIncluding": "4.36"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "535174D3-2470-4FF3-827B-70737F6872FE"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93312055-0238-4082-A3E0-E2E50491103A"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5F225C4-EEFA-4DEE-81AA-BB69172FAE0B"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC85E443-08AE-4222-9807-9C2514713C54"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "890A26BB-117B-4F8E-A22A-992EC9FECAFC"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "321399A6-2ED0-4F88-B62C-6B0E248F9F58"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C6ACEBC-5042-427A-862B-EBC0DCB7056E"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D2DBB10-07D4-43CE-80C4-6875C4A120C1"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CB9951A-AA2A-4DD9-91E7-1A741D8FDCC7"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01BFBF79-0937-4817-B27F-AAB22D14A193"
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81B875AF-40F2-4CFB-8E7D-6B2E5EE87370"
}
],
"operator": "OR"
}
]
}
]