CVE-2013-3945: vulnerability in IrfanView MrSID plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.1%
In short
The MrSID image plugin for IrfanView versions before 4.37 contains a flaw that allows attackers to run malicious code by opening a specially crafted image file with a malformed nband tag.
Technical detail
The MrSID.dll plugin fails to properly validate the nband tag in MrSID image files, enabling remote code execution when a victim opens a crafted file. An attacker can deliver the malicious image via network or email, and execution occurs within the context of the IrfanView application.
Summary generated and translated by AI from the official description.
The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.
Affected products
IrfanView · MrSID pluginRelated CVEs — IrfanView MrSID plugin
In the same product, most dangerous first.