PT-2020-7474

CVE-2013-3945

·

Published

2020-01-02

·

Updated

2020-01-17

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: IrfanView MrSID plugin versions prior to 4.37
Description: The issue allows remote attackers to execute arbitrary code via a nband tag. This can be exploited by attackers to gain unauthorized access to systems.
Recommendations: For IrfanView MrSID plugin versions prior to 4.37, update to version 4.37 or later to resolve the issue. As a temporary workaround, consider disabling the MrSID plugin until a patch is available. Restrict access to files that may contain malicious nband tags to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾