5

CVE-2010-1509

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error."

Data is provided by the National Vulnerability Database (NVD)
Irfanview ≫ Irfanview Version <= 4.25
Irfanview ≫ Irfanview Version1.70
Irfanview ≫ Irfanview Version1.75
Irfanview ≫ Irfanview Version1.80
Irfanview ≫ Irfanview Version1.85
Irfanview ≫ Irfanview Version1.90
Irfanview ≫ Irfanview Version1.95
Irfanview ≫ Irfanview Version1.97
Irfanview ≫ Irfanview Version1.98
Irfanview ≫ Irfanview Version1.98a
Irfanview ≫ Irfanview Version1.99
Irfanview ≫ Irfanview Version2.00
Irfanview ≫ Irfanview Version2.05
Irfanview ≫ Irfanview Version2.07
Irfanview ≫ Irfanview Version2.10
Irfanview ≫ Irfanview Version2.12
Irfanview ≫ Irfanview Version2.15
Irfanview ≫ Irfanview Version2.17
Irfanview ≫ Irfanview Version2.18
Irfanview ≫ Irfanview Version2.20
Irfanview ≫ Irfanview Version2.22
Irfanview ≫ Irfanview Version2.25
Irfanview ≫ Irfanview Version2.27
Irfanview ≫ Irfanview Version2.30
Irfanview ≫ Irfanview Version2.32
Irfanview ≫ Irfanview Version2.35
Irfanview ≫ Irfanview Version2.37
Irfanview ≫ Irfanview Version2.40
Irfanview ≫ Irfanview Version2.50
Irfanview ≫ Irfanview Version2.52
Irfanview ≫ Irfanview Version2.55
Irfanview ≫ Irfanview Version2.60
Irfanview ≫ Irfanview Version2.62
Irfanview ≫ Irfanview Version2.63
Irfanview ≫ Irfanview Version2.65
Irfanview ≫ Irfanview Version2.66
Irfanview ≫ Irfanview Version2.68
Irfanview ≫ Irfanview Version2.80
Irfanview ≫ Irfanview Version2.82
Irfanview ≫ Irfanview Version2.83
Irfanview ≫ Irfanview Version2.85
Irfanview ≫ Irfanview Version2.90
Irfanview ≫ Irfanview Version2.92
Irfanview ≫ Irfanview Version2.95
Irfanview ≫ Irfanview Version2.97
Irfanview ≫ Irfanview Version2.98
Irfanview ≫ Irfanview Version3.00
Irfanview ≫ Irfanview Version3.02
Irfanview ≫ Irfanview Version3.05
Irfanview ≫ Irfanview Version3.07
Irfanview ≫ Irfanview Version3.10
Irfanview ≫ Irfanview Version3.12
Irfanview ≫ Irfanview Version3.15
Irfanview ≫ Irfanview Version3.17
Irfanview ≫ Irfanview Version3.20
Irfanview ≫ Irfanview Version3.21
Irfanview ≫ Irfanview Version3.25
Irfanview ≫ Irfanview Version3.30
Irfanview ≫ Irfanview Version3.33
Irfanview ≫ Irfanview Version3.35
Irfanview ≫ Irfanview Version3.36
Irfanview ≫ Irfanview Version3.50
Irfanview ≫ Irfanview Version3.51
Irfanview ≫ Irfanview Version3.60
Irfanview ≫ Irfanview Version3.61
Irfanview ≫ Irfanview Version3.70
Irfanview ≫ Irfanview Version3.75
Irfanview ≫ Irfanview Version3.80
Irfanview ≫ Irfanview Version3.85
Irfanview ≫ Irfanview Version3.90
Irfanview ≫ Irfanview Version3.91
Irfanview ≫ Irfanview Version3.92
Irfanview ≫ Irfanview Version3.95
Irfanview ≫ Irfanview Version3.97
Irfanview ≫ Irfanview Version3.98
Irfanview ≫ Irfanview Version3.99
Irfanview ≫ Irfanview Version4.00
Irfanview ≫ Irfanview Version4.10
Irfanview ≫ Irfanview Version4.20
Irfanview ≫ Irfanview Version4.22
Irfanview ≫ Irfanview Version4.23
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.68% 0.868
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.