CVEvulnerability

CVE-2013-6932

7.6 HIGH Published 2013-12-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-12-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window.

Affected configurations

• irfanview irfanview (<= 4.36) • irfanview irfanview 4.00 • irfanview irfanview 4.10 • irfanview irfanview 4.20 • irfanview irfanview 4.23 • irfanview irfanview 4.25 • irfanview irfanview 4.27 • irfanview irfanview 4.28 • irfanview irfanview 4.30 • irfanview irfanview 4.32 • irfanview irfanview 4.33 • irfanview irfanview 4.35

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References