Detections
Analytics
IrfanView MrSID Plugin < 4.37 Multiple Buffer Overflows
high Nessus Plugin ID 72394
Language:
Synopsis
An application on the remote host is affected by multiple buffer overflow vulnerabilities.Description
The version of the IrfanView MrSID plugin (MrSID.dll) installed on the remote Windows host is a version prior to 4.37. It is, therefore, affected by multiple buffer overflow vulnerabilities :- A stack-based buffer overflow exists due to improper validation of the 'IMAGE' tag. (CVE-2013-3944)
- A heap-based buffer overflow exists due to improper validation of the 'nband' tag. (CVE-2013-3945)
- An integer overflow exists due to improper validation of the 'levels' header, which could lead to a heap-based buffer overflow. (CVE-2013-3946)
An attacker can exploit these issues by sending a specially crafted SID file, which could result in a denial of service or arbitrary code execution.
Solution
Upgrade the MrSID plugin to version 4.3.7.0 (4.37) or later.See Also
https://secuniaresearch.flexerasoftware.com/advisories/54444/
Plugin Details
Severity: High
ID: 72394
File Name: irfanview_mrsid_4_37.nasl
Version: 1.5
Type: local
Agent: windows
Family: Windows
Published: 2/7/2014
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:irfanview:irfanview
Required KB Items: SMB/IrfanView/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/16/2013
Vulnerability Publication Date: 12/17/2013
Exploitable With
Core Impact