Skip to content
OpenAdvisories
Medium WID-SEC-2024-3156 5 CVEs

Irfan Skiljan IrfanView: Mehrere Schwachstellen ermöglichen Codeausführung

Published Oct 13, 2024 · Updated Oct 13, 2024 · de-DE

Vendor: Irfan Skiljan Product: IrfanView Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Irfan Skiljan IrfanView ausnutzen, um beliebigen Programmcode auszuführen.

Product

IrfanView ist ein Bildbetrachter für Windows.

Vulnerabilities 5

  • High 7.8
    CVE-2024-9258

    IrfanView SID File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

    IrfanView SID File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in th…

    IrfanView IrfanView
  • High 7.8
    CVE-2024-9259

    IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that…

    IrfanView IrfanView
  • High 7.8
    CVE-2024-9260

    IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that…

    IrfanView IrfanView
  • High 7.8
    CVE-2024-9261

    IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability…

    IrfanView IrfanView
  • High 7.8
    CVE-2024-9767

    IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

    IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that …

    IrfanView IrfanView

Revision history

  1. #1

    Initiale Fassung

References