Vulnerability-Lookup

WID-SEC-W-2024-1719

Vulnerability from csaf_certbund - Published: 2024-07-28 22:00 - Updated: 2024-07-28 22:00

Summary

Irfan Skiljan IrfanView: Mehrere Schwachstellen ermöglichen Codeausführung

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

IrfanView ist ein Bildbetrachter für Windows.

Angriff

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Irfan Skiljan IrfanView ausnutzen, um beliebigen Programmcode auszuführen.

Betroffene Betriebssysteme

- Sonstiges - Windows

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IrfanView ist ein Bildbetrachter f\u00fcr Windows.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Irfan Skiljan IrfanView ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1719 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1719.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1719 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1719"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-967/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-968/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-969/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-970/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-971/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-972/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-973/"
      },
      {
        "category": "external",
        "summary": "ZDI Advisory vom 2024-07-28",
        "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-974/"
      }
    ],
    "source_lang": "en-US",
    "title": "Irfan Skiljan IrfanView: Mehrere Schwachstellen erm\u00f6glichen Codeausf\u00fchrung",
    "tracking": {
      "current_release_date": "2024-07-28T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:11:46.753+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-1719",
      "initial_release_date": "2024-07-28T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-07-28T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Plugins \u003c4.67",
                "product": {
                  "name": "Irfan Skiljan IrfanView Plugins \u003c4.67",
                  "product_id": "T036480"
                }
              }
            ],
            "category": "product_name",
            "name": "IrfanView"
          }
        ],
        "category": "vendor",
        "name": "Irfan Skiljan"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6815",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6815"
    },
    {
      "cve": "CVE-2024-6816",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6816"
    },
    {
      "cve": "CVE-2024-6817",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6817"
    },
    {
      "cve": "CVE-2024-6818",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6818"
    },
    {
      "cve": "CVE-2024-6819",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6819"
    },
    {
      "cve": "CVE-2024-6820",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6820"
    },
    {
      "cve": "CVE-2024-6821",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6821"
    },
    {
      "cve": "CVE-2024-6822",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Irfan Skiljan IrfanView beim Parsen von RLE, PSP, AWD und CIN Dateien. Diese Fehler bestehen aufgrund des Fehlens einer angemessenen Validierung der vom Benutzer bereitgestellten Daten, was zu einem Schreiben \u00fcber das Ende eines zugewiesenen Puffers hinaus f\u00fchren kann. Ein entfernter, anonymer Angreifer kann diese Sicherheitsl\u00fccken ausnutzen, um beliebigen Code im Kontext des aktuellen Prozesses auszuf\u00fchren. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion, in diesem Fall muss das Opfer eine b\u00f6sartige Seite besuchen oder eine b\u00f6sartige Datei \u00f6ffnen."
        }
      ],
      "release_date": "2024-07-28T22:00:00.000+00:00",
      "title": "CVE-2024-6822"
    }
  ]
}

CVE-2024-6817 (GCVE-0-2024-6817)

Vulnerability from cvelistv5 – Published: 2024-11-22 20:05 – Updated: 2024-11-22 21:55

Title

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23216.

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.70",
                "status": "affected",
                "version": "4.67",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6817",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-22T21:19:47.815110Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-22T21:55:50.646Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:39:06.265-05:00",
      "datePublic": "2024-07-26T22:48:03.432-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23216."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T20:05:50.302Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-969",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-969/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6817",
    "datePublished": "2024-11-22T20:05:50.302Z",
    "dateReserved": "2024-07-16T21:39:06.236Z",
    "dateUpdated": "2024-11-22T21:55:50.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6819 (GCVE-0-2024-6819)

Vulnerability from cvelistv5 – Published: 2024-11-22 21:13 – Updated: 2024-11-25 16:05

Title

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.67",
                "status": "affected",
                "version": "4.66",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6819",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T16:05:19.503653Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T16:05:22.374Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:39:55.583-05:00",
      "datePublic": "2024-07-26T22:48:17.251-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23219."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T21:13:13.495Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-971",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-971/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6819",
    "datePublished": "2024-11-22T21:13:13.495Z",
    "dateReserved": "2024-07-16T21:39:55.556Z",
    "dateUpdated": "2024-11-25T16:05:22.374Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6821 (GCVE-0-2024-6821)

Vulnerability from cvelistv5 – Published: 2024-11-22 21:13 – Updated: 2024-11-25 14:55

Title

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CIN files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23260.

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.67",
                "status": "affected",
                "version": "4.66",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6821",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T14:47:24.296804Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T14:55:28.814Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:40:30.820-05:00",
      "datePublic": "2024-07-26T22:48:41.271-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CIN files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23260."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T21:13:23.429Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-973",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-973/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6821",
    "datePublished": "2024-11-22T21:13:23.429Z",
    "dateReserved": "2024-07-16T21:40:30.793Z",
    "dateUpdated": "2024-11-25T14:55:28.814Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6815 (GCVE-0-2024-6815)

Vulnerability from cvelistv5 – Published: 2024-11-22 20:05 – Updated: 2024-11-22 21:55

Title

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23159.

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.70",
                "status": "affected",
                "version": "4.67",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6815",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-22T21:19:50.310807Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-22T21:55:50.421Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:38:08.857-05:00",
      "datePublic": "2024-07-26T22:47:42.465-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of RLE files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23159."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T20:05:48.229Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-967",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-967/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6815",
    "datePublished": "2024-11-22T20:05:48.229Z",
    "dateReserved": "2024-07-16T21:38:08.816Z",
    "dateUpdated": "2024-11-22T21:55:50.421Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6822 (GCVE-0-2024-6822)

Vulnerability from cvelistv5 – Published: 2024-11-22 21:13 – Updated: 2024-11-25 14:55

Title

IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.67",
                "status": "affected",
                "version": "4.66",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6822",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T14:45:17.625399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T14:55:28.919Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:40:46.890-05:00",
      "datePublic": "2024-07-26T22:48:48.280-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CIN files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23261."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T21:13:28.121Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-974",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-974/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6822",
    "datePublished": "2024-11-22T21:13:28.121Z",
    "dateReserved": "2024-07-16T21:40:46.866Z",
    "dateUpdated": "2024-11-25T14:55:28.919Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6818 (GCVE-0-2024-6818)

Vulnerability from cvelistv5 – Published: 2024-11-22 21:13 – Updated: 2024-11-25 16:05

Title

IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.67",
                "status": "affected",
                "version": "4.66",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T16:05:31.601592Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T16:05:34.903Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:39:35.951-05:00",
      "datePublic": "2024-07-26T22:48:09.700-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23217."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T21:13:09.329Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-970",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-970/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6818",
    "datePublished": "2024-11-22T21:13:09.329Z",
    "dateReserved": "2024-07-16T21:39:35.927Z",
    "dateUpdated": "2024-11-25T16:05:34.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6816 (GCVE-0-2024-6816)

Vulnerability from cvelistv5 – Published: 2024-11-22 20:05 – Updated: 2024-11-22 21:55

Title

IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Summary

IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23214.

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.70",
                "status": "affected",
                "version": "4.67",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6816",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-22T21:19:49.009168Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-22T21:55:50.531Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:38:42.536-05:00",
      "datePublic": "2024-07-26T22:47:55.958-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23214."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122: Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T20:05:49.310Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-968",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-968/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6816",
    "datePublished": "2024-11-22T20:05:49.310Z",
    "dateReserved": "2024-07-16T21:38:42.438Z",
    "dateUpdated": "2024-11-22T21:55:50.531Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-6820 (GCVE-0-2024-6820)

Vulnerability from cvelistv5 – Published: 2024-11-22 21:13 – Updated: 2024-11-25 14:55

Title

IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Summary

IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23232.

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Assigner

zdi

References

URL

Tags

https://www.zerodayinitiative.com/advisories/ZDI-…

x_research-advisory

Impacted products

	Vendor	Product	Version
	IrfanView	IrfanView	Affected: 4.66 64bit

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "irfanview",
            "vendor": "irfanview",
            "versions": [
              {
                "lessThan": "4.67",
                "status": "affected",
                "version": "4.66",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-6820",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T14:47:28.890966Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T14:55:28.667Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "IrfanView",
          "vendor": "IrfanView",
          "versions": [
            {
              "status": "affected",
              "version": "4.66 64bit"
            }
          ]
        }
      ],
      "dateAssigned": "2024-07-16T16:40:11.543-05:00",
      "datePublic": "2024-07-26T22:48:26.104-05:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of AWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23232."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-22T21:13:19.424Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-972",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-972/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Anonymous"
      },
      "title": "IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2024-6820",
    "datePublished": "2024-11-22T21:13:19.424Z",
    "dateReserved": "2024-07-16T21:40:11.516Z",
    "dateUpdated": "2024-11-25T14:55:28.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2024-1719

CVE-2024-6817 (GCVE-0-2024-6817)

CVE-2024-6819 (GCVE-0-2024-6819)

CVE-2024-6821 (GCVE-0-2024-6821)

CVE-2024-6815 (GCVE-0-2024-6815)

CVE-2024-6822 (GCVE-0-2024-6822)

CVE-2024-6818 (GCVE-0-2024-6818)

CVE-2024-6816 (GCVE-0-2024-6816)

CVE-2024-6820 (GCVE-0-2024-6820)

Tags

Sightings

Nomenclature