« Volver al listado

CVE-2013-6932

Estado: ModificadaAlta (7.6)—

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Irfanview — Irfanview

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6932",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-28T04:53:06.727",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN63194482/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000120",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://www.irfanview.com/main_history.htm",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN63194482/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000120",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.irfanview.com/main_history.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en IrfanView anterior a 4.37  cuando se utiliza un nombre de directorio de caracteres multibyte, que permite a atacantes remotos ejecutar código arbitrario mediante un archivo manipulado  el cual se maneja incorrectamente por la funcionalidad de información de herramientas en miniatura ofrecen en la ventana Miniaturas."
    }
  ],
  "lastModified": "2026-06-17T00:01:09.053",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74420D72-9C49-47BE-8AB7-28469088584D",
              "versionEndIncluding": "4.36"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "535174D3-2470-4FF3-827B-70737F6872FE"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93312055-0238-4082-A3E0-E2E50491103A"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5F225C4-EEFA-4DEE-81AA-BB69172FAE0B"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC85E443-08AE-4222-9807-9C2514713C54"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.25:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "890A26BB-117B-4F8E-A22A-992EC9FECAFC"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "321399A6-2ED0-4F88-B62C-6B0E248F9F58"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C6ACEBC-5042-427A-862B-EBC0DCB7056E"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D2DBB10-07D4-43CE-80C4-6875C4A120C1"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CB9951A-AA2A-4DD9-91E7-1A741D8FDCC7"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01BFBF79-0937-4817-B27F-AAB22D14A193"
            },
            {
              "criteria": "cpe:2.3:a:irfanview:irfanview:4.35:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81B875AF-40F2-4CFB-8E7D-6B2E5EE87370"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}