IrfanView Formats PlugIn 'MrSID.dll' Stack Buffer Overflow Vulnerability
BID:64385
CVE-2013-3944 |Info
IrfanView Formats PlugIn 'MrSID.dll' Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 64385 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-3944 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2013 12:00AM |
| Updated: | Apr 17 2014 01:02AM |
| Credit: | Parvez Anwar via Secunia |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IrfanView Formats PlugIn 'MrSID.dll' Stack Buffer Overflow Vulnerability
The Formats PlugIn for IrfanView is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.
Formats PlugIn 4.36 is vulnerable; other versions may also be affected.
The Formats PlugIn for IrfanView is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.
Formats PlugIn 4.36 is vulnerable; other versions may also be affected.
Exploit / POC
IrfanView Formats PlugIn 'MrSID.dll' Stack Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
IrfanView Formats PlugIn 'MrSID.dll' Stack Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IrfanView Formats PlugIn 'MrSID.dll' Stack Buffer Overflow Vulnerability
References:
References:
- IrfanView Homepage (IrfanView)
- IrfanView PlugIns (IrfanView)