Skip to content
OpenAdvisories
Medium WID-SEC-2024-1373 4 CVEs

Irfan Skiljan IrfanView: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 12, 2024 · Updated Jun 13, 2024 · Revision 2 · de-DE

Vendor: Irfan Skiljan Product: IrfanView Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Irfan Skiljan IrfanView ausnutzen, um beliebigen Programmcode auszuführen.

Product

IrfanView ist ein Bildbetrachter für Windows.

Vulnerabilities 4

  • High 7.8
    CVE-2024-5874

    IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that…

    IrfanView IrfanView
  • High 7.8
    CVE-2024-5875

    IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that…

    IrfanView IrfanView
  • High 7.8
    CVE-2024-5876

    IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability …

    IrfanView IrfanView
  • High 7.8
    CVE-2024-5877

    IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that…

    IrfanView IrfanView

Revision history

  1. #2

    Produktversion angepasst

  2. #1

    Initiale Fassung

References