Vulnerabilidades em IrfanView

184 resultados
Análise Vexday

O IrfanView acumula 183 CVEs catalogadas, volume considerável para um visualizador de imagens, com CWE-119 (falhas de gerenciamento de memória, como buffer overflow) como categoria dominante — padrão típico de aplicações que processam múltiplos formatos de arquivo. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, sem nenhum registro no KEV até o momento, e a ausência de PoCs públicas conhecidas reduz a exposição imediata. A CVE mais relevante no contexto atual é CVE-2013-3944, com score EPSS de 0,275, indicando probabilidade não trivial de exploração apesar da sua antiguidade — o que sugere que vulnerabilidades históricas nessa base de código merecem atenção em ambientes onde o software ainda está em uso. A inexistência de novas CVEs nos últimos 90 dias pode refletir menor atividade de pesquisa recente, mas não deve ser interpretada como ausência de risco residual na superfície de ataque legada.

CVE-2024-11545HIGHIrfanView DXF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11517HIGHIrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11506HIGHIrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11513HIGHIrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11514HIGHIrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11518HIGHIrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11516HIGHIrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11528HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11523HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11524HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11519HIGHIrfanView RLE File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11525HIGHIrfanView DXF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11566HIGHIrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11567HIGHIrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11563HIGHIrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11561HIGHIrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11562HIGHIrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11559HIGHIrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11560HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11553HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%