CVE-2012-5904 (GCVE-0-2012-5904)
Vulnerability from cvelistv5 – Published: 2012-11-17 21:00 – Updated: 2024-08-06 21:21
VLAI
EPSS
VEX
Summary
Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/52806 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/47333 | third-party-advisoryx_refsource_SECUNIA |
| http://osvdb.org/80716 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.irfanview.com/history_old.htm | x_refsource_CONFIRM |
Date Public
2012-03-28 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:21:27.244Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "52806",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/52806"
},
{
"name": "47333",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/47333"
},
{
"name": "80716",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/80716"
},
{
"name": "irfanview-dibrlebmp-bo(74452)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.irfanview.com/history_old.htm"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2012-03-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "52806",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/52806"
},
{
"name": "47333",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/47333"
},
{
"name": "80716",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/80716"
},
{
"name": "irfanview-dibrlebmp-bo(74452)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.irfanview.com/history_old.htm"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2012-5904",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "52806",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/52806"
},
{
"name": "47333",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/47333"
},
{
"name": "80716",
"refsource": "OSVDB",
"url": "http://osvdb.org/80716"
},
{
"name": "irfanview-dibrlebmp-bo(74452)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
},
{
"name": "http://www.irfanview.com/history_old.htm",
"refsource": "CONFIRM",
"url": "http://www.irfanview.com/history_old.htm"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2012-5904",
"datePublished": "2012-11-17T21:00:00.000Z",
"dateReserved": "2012-11-17T00:00:00.000Z",
"dateUpdated": "2024-08-06T21:21:27.244Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2012-5904",
"date": "2026-09-25",
"epss": "0.05733",
"percentile": "0.92773"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6883C635-3987-49FE-92EF-FB082782A363",
"versionEndIncluding": "4.32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.70:*:*:*:*:*:*:*",
"matchCriteriaId": "7B5AC2D0-D6A6-40A3-8271-ACB0A242CBBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.80:*:*:*:*:*:*:*",
"matchCriteriaId": "069EA695-B5C5-4C57-98C8-E03793AC60F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.85:*:*:*:*:*:*:*",
"matchCriteriaId": "A9F96F9E-5CE6-4B50-812C-1BB27F5DB65B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.90:*:*:*:*:*:*:*",
"matchCriteriaId": "778DAC6D-12C1-470A-BBC4-62CAE0F0BA7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.95:*:*:*:*:*:*:*",
"matchCriteriaId": "CA9869CE-BCE4-4915-A4F2-7D429F98F37A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.97:*:*:*:*:*:*:*",
"matchCriteriaId": "F9771B28-A7BC-42B5-BA24-63727CE0EBE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.98:*:*:*:*:*:*:*",
"matchCriteriaId": "51705801-EA1E-4E0E-AF6A-2EBE49556DAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.98a:*:*:*:*:*:*:*",
"matchCriteriaId": "DE0A6535-183B-48D8-BB93-4E4D392D840E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.99:*:*:*:*:*:*:*",
"matchCriteriaId": "4BE7AF00-42F3-4483-BC34-B24F1C328F49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.00:*:*:*:*:*:*:*",
"matchCriteriaId": "1DF2CFFB-B79A-4554-A57C-2E675B65D52B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.05:*:*:*:*:*:*:*",
"matchCriteriaId": "05DB3B2A-4FC0-4AA5-AE9A-E8242795E31E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.07:*:*:*:*:*:*:*",
"matchCriteriaId": "C24720C1-DA36-4A95-BC70-2CB98B8D0FBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A18B1613-378A-483B-8BCE-D013CF24F200",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.12:*:*:*:*:*:*:*",
"matchCriteriaId": "28F0AB90-6123-4E1B-BBED-B7BD1478668C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.15:*:*:*:*:*:*:*",
"matchCriteriaId": "5DA19D23-2907-42F2-A1BF-348AF1F8FC3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.17:*:*:*:*:*:*:*",
"matchCriteriaId": "125360D8-8959-46B8-9977-BF1D03BA55CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.18:*:*:*:*:*:*:*",
"matchCriteriaId": "F2C63D78-6152-42CC-BD5B-98AA34727BE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "369C42FA-DF57-4453-A3F8-BC93257D415E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.22:*:*:*:*:*:*:*",
"matchCriteriaId": "59923D0D-E3B4-4C59-B167-D59522C332EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.25:*:*:*:*:*:*:*",
"matchCriteriaId": "070AE76D-E1A6-4532-B67F-EC1AF2E67AC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.27:*:*:*:*:*:*:*",
"matchCriteriaId": "3285C557-FAEB-4604-BF33-E42693B6545D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.30:*:*:*:*:*:*:*",
"matchCriteriaId": "050B6B28-11D9-4D06-B6C3-0A26769B73F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.32:*:*:*:*:*:*:*",
"matchCriteriaId": "82744B9A-2989-45D2-B144-47C78384B556",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.35:*:*:*:*:*:*:*",
"matchCriteriaId": "AE235D0D-52FA-4E58-BD98-75F8452A8F0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.37:*:*:*:*:*:*:*",
"matchCriteriaId": "242E8825-7E8F-4883-BDAA-10B7775CD298",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.40:*:*:*:*:*:*:*",
"matchCriteriaId": "0C28B2DC-0C5A-45C5-A6F6-2E0485C27299",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.50:*:*:*:*:*:*:*",
"matchCriteriaId": "F78602D6-A56B-4EF7-AD89-74DD67C716CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.52:*:*:*:*:*:*:*",
"matchCriteriaId": "D2163005-6B7C-4899-8770-AEB07DB4C522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.55:*:*:*:*:*:*:*",
"matchCriteriaId": "660EEA7C-664C-4BDD-BAE4-03B42FF52F80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.60:*:*:*:*:*:*:*",
"matchCriteriaId": "7FC20487-0A24-4536-A3CE-4A00B2182F18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.63:*:*:*:*:*:*:*",
"matchCriteriaId": "7D08F804-5ED8-49BC-A5F0-50DC873B1A72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.65:*:*:*:*:*:*:*",
"matchCriteriaId": "BEFD6493-AC2A-4628-BC20-D85F42E98A7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.66:*:*:*:*:*:*:*",
"matchCriteriaId": "87E28602-8072-4881-867D-A870E441316D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.68:*:*:*:*:*:*:*",
"matchCriteriaId": "5AB81B36-E878-4A02-BE99-DCF025E20CEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.80:*:*:*:*:*:*:*",
"matchCriteriaId": "F6DE3D7C-DF35-4921-B240-265E7825EA93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.82:*:*:*:*:*:*:*",
"matchCriteriaId": "4FBECB19-B064-4DD1-87F4-A4AF47E4502E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.83:*:*:*:*:*:*:*",
"matchCriteriaId": "AFE0D6AE-6CB5-49C6-8B59-BEA4CDE23292",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.85:*:*:*:*:*:*:*",
"matchCriteriaId": "F3E4C52B-FE56-4422-BEA3-F534AC855CEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.90:*:*:*:*:*:*:*",
"matchCriteriaId": "72BB9CBF-BA33-42F3-875D-CFB527E877AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.92:*:*:*:*:*:*:*",
"matchCriteriaId": "60ADDB85-60FB-4226-A8D3-A78650478FE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.95:*:*:*:*:*:*:*",
"matchCriteriaId": "1A24DB1B-A1CB-4005-BF1B-B81DC83E42CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.97:*:*:*:*:*:*:*",
"matchCriteriaId": "0D5C86C3-D914-4C12-9408-381D9F349AEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.98:*:*:*:*:*:*:*",
"matchCriteriaId": "819E7311-7452-484B-8BE0-901C49E043CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.00:*:*:*:*:*:*:*",
"matchCriteriaId": "15187176-FD8E-4147-AE84-8D9A57853A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.02:*:*:*:*:*:*:*",
"matchCriteriaId": "92AA2459-7D9D-41A2-A08A-41AAF892CEF6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.05:*:*:*:*:*:*:*",
"matchCriteriaId": "C4D44A34-BDDC-4AF8-BE32-095EA55F5709",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.07:*:*:*:*:*:*:*",
"matchCriteriaId": "4D74B745-5E26-486F-94CA-3904BDECA7FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.10:*:*:*:*:*:*:*",
"matchCriteriaId": "BE8AFE10-C6EB-4767-B179-DD74449D8F3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.12:*:*:*:*:*:*:*",
"matchCriteriaId": "417E0560-88EC-4AD7-9D66-21B76773C974",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.15:*:*:*:*:*:*:*",
"matchCriteriaId": "7E36728A-5EB8-4C91-8BB0-EAB93C7042D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.17:*:*:*:*:*:*:*",
"matchCriteriaId": "2A02C59C-2ECF-4221-9BA9-C8044380BBE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.20:*:*:*:*:*:*:*",
"matchCriteriaId": "4A1D6C64-C2D4-481A-A337-FDB0F9F840F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.21:*:*:*:*:*:*:*",
"matchCriteriaId": "B257EFB2-0694-4704-8BA1-63CCC1530B1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.25:*:*:*:*:*:*:*",
"matchCriteriaId": "0AB01D76-C2CD-48EE-8AD9-A79DAB4CA26E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.30:*:*:*:*:*:*:*",
"matchCriteriaId": "06CEDC86-9B7D-4214-BF99-16E70D414268",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.33:*:*:*:*:*:*:*",
"matchCriteriaId": "3BB76F6F-2473-4E7E-8BA5-06A34CF9F68E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.35:*:*:*:*:*:*:*",
"matchCriteriaId": "8C2A7D99-F807-4655-AAE9-35529632351D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C97A5E6-3982-486C-8B98-1886F19C9EFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.50:*:*:*:*:*:*:*",
"matchCriteriaId": "1A973DBB-7863-4151-831A-32D3FF4582B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.51:*:*:*:*:*:*:*",
"matchCriteriaId": "CC6DC7D1-E198-45AB-9B5A-82E4A5E607AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.60:*:*:*:*:*:*:*",
"matchCriteriaId": "5B577814-CF78-416B-927F-13B75573CD07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.61:*:*:*:*:*:*:*",
"matchCriteriaId": "C33F00BC-A90C-4078-8009-3B76EDE1304A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.70:*:*:*:*:*:*:*",
"matchCriteriaId": "94194E7B-88A1-4902-ABDB-880A33021106",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.75:*:*:*:*:*:*:*",
"matchCriteriaId": "0CDBB8F3-79C0-40B1-931D-6A91F0BE88A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.80:*:*:*:*:*:*:*",
"matchCriteriaId": "FEB6E674-EE17-4589-8C12-B5D184F4F7D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.85:*:*:*:*:*:*:*",
"matchCriteriaId": "9F3F33FB-51AE-4632-9797-623EED02CBB7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.90:*:*:*:*:*:*:*",
"matchCriteriaId": "36DE03F4-B43E-4ABE-9218-86760400FD40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.91:*:*:*:*:*:*:*",
"matchCriteriaId": "302853B4-9FB8-430C-8C69-EFCCDD2C4380",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.92:*:*:*:*:*:*:*",
"matchCriteriaId": "6806E555-A3E5-4B8D-94B4-40BE4A549311",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.95:*:*:*:*:*:*:*",
"matchCriteriaId": "D5A2AF49-C8CE-4CEB-9154-EB47366E71AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.97:*:*:*:*:*:*:*",
"matchCriteriaId": "0D5981E4-CA70-4760-8D58-16BC983E5034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*",
"matchCriteriaId": "DB8391AF-D227-437B-9DF0-E8FF82A625CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.99:*:*:*:*:*:*:*",
"matchCriteriaId": "BBB69385-44C6-41FD-924D-F577B862F74D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*",
"matchCriteriaId": "535174D3-2470-4FF3-827B-70737F6872FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*",
"matchCriteriaId": "93312055-0238-4082-A3E0-E2E50491103A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*",
"matchCriteriaId": "E5F225C4-EEFA-4DEE-81AA-BB69172FAE0B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*",
"matchCriteriaId": "FC85E443-08AE-4222-9807-9C2514713C54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.25:*:*:*:*:*:*:*",
"matchCriteriaId": "890A26BB-117B-4F8E-A22A-992EC9FECAFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.27:*:*:*:*:*:*:*",
"matchCriteriaId": "321399A6-2ED0-4F88-B62C-6B0E248F9F58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.28:*:*:*:*:*:*:*",
"matchCriteriaId": "7C6ACEBC-5042-427A-862B-EBC0DCB7056E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.30:*:*:*:*:*:*:*",
"matchCriteriaId": "3D2DBB10-07D4-43CE-80C4-6875C4A120C1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image."
},
{
"lang": "es",
"value": "Una vulnerabilidad de desbordamiento de b\u00fafer basado en memoria din\u00e1mica en IrfanView antes de v4.33 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un archivo de mapa de bits comprimido RLE modificado como si fuera una imagen DIB, RLE o BMP."
}
],
"id": "CVE-2012-5904",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2012-11-17T21:55:05.047",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/80716"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/47333"
},
{
"source": "cve@mitre.org",
"url": "http://www.irfanview.com/history_old.htm"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/52806"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/80716"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/47333"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.irfanview.com/history_old.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/52806"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…