CVE-2013-5351: Buffer Overflow
Published Feb 14, 2014
·Updated
Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file.
Affected Software
89 affected components
IrfanView IrfanView<=4.36
IrfanView IrfanView=1.70
IrfanView IrfanView=1.75
IrfanView IrfanView=1.80
IrfanView IrfanView=1.85
IrfanView IrfanView=1.90
IrfanView IrfanView=1.95
IrfanView IrfanView=1.97
IrfanView IrfanView=1.98
IrfanView IrfanView=1.98a
IrfanView IrfanView=1.99
IrfanView IrfanView=2.00
IrfanView IrfanView=2.05
IrfanView IrfanView=2.07
IrfanView IrfanView=2.10
IrfanView IrfanView=2.12
IrfanView IrfanView=2.15
IrfanView IrfanView=2.17
IrfanView IrfanView=2.18
IrfanView IrfanView=2.20
IrfanView IrfanView=2.22
IrfanView IrfanView=2.25
IrfanView IrfanView=2.27
IrfanView IrfanView=2.30
IrfanView IrfanView=2.32
IrfanView IrfanView=2.35
IrfanView IrfanView=2.37
IrfanView IrfanView=2.40
IrfanView IrfanView=2.50
IrfanView IrfanView=2.52
IrfanView IrfanView=2.55
IrfanView IrfanView=2.60
IrfanView IrfanView=2.62
IrfanView IrfanView=2.63
IrfanView IrfanView=2.65
IrfanView IrfanView=2.66
IrfanView IrfanView=2.68
IrfanView IrfanView=2.80
IrfanView IrfanView=2.82
IrfanView IrfanView=2.83
IrfanView IrfanView=2.85
IrfanView IrfanView=2.90
IrfanView IrfanView=2.92
IrfanView IrfanView=2.95
IrfanView IrfanView=2.97
IrfanView IrfanView=2.98
IrfanView IrfanView=3.00
IrfanView IrfanView=3.0.7
IrfanView IrfanView=3.02
IrfanView IrfanView=3.05
IrfanView IrfanView=3.07
IrfanView IrfanView=3.10
IrfanView IrfanView=3.12
IrfanView IrfanView=3.15
IrfanView IrfanView=3.17
IrfanView IrfanView=3.20
IrfanView IrfanView=3.21
IrfanView IrfanView=3.25
IrfanView IrfanView=3.30
IrfanView IrfanView=3.33
IrfanView IrfanView=3.35
IrfanView IrfanView=3.36
IrfanView IrfanView=3.50
IrfanView IrfanView=3.51
IrfanView IrfanView=3.60
IrfanView IrfanView=3.61
IrfanView IrfanView=3.70
IrfanView IrfanView=3.75
IrfanView IrfanView=3.80
IrfanView IrfanView=3.85
IrfanView IrfanView=3.90
IrfanView IrfanView=3.91
IrfanView IrfanView=3.92
IrfanView IrfanView=3.95
IrfanView IrfanView=3.97
IrfanView IrfanView=3.98
IrfanView IrfanView=3.99
IrfanView IrfanView=4.00
IrfanView IrfanView=4.10
IrfanView IrfanView=4.20
IrfanView IrfanView=4.22
IrfanView IrfanView=4.23
IrfanView IrfanView=4.25
IrfanView IrfanView=4.27
IrfanView IrfanView=4.28
IrfanView IrfanView=4.30
IrfanView IrfanView=4.32
IrfanView IrfanView=4.33
IrfanView IrfanView=4.35
Event History
Feb 14, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5351?
CVE-2013-5351 has been classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2013-5351?
To fix CVE-2013-5351, update IrfanView to version 4.37 or later.
3
Which versions of IrfanView are affected by CVE-2013-5351?
Versions of IrfanView prior to 4.37, as well as specific older versions like 1.70 to 4.36, are affected by CVE-2013-5351.
4
What kind of attack can exploit CVE-2013-5351?
CVE-2013-5351 can be exploited by remote attackers through specially crafted GIF files that trigger a heap-based buffer overflow.
5
Is CVE-2013-5351 a local or remote vulnerability?
CVE-2013-5351 is a remote vulnerability, allowing attackers to execute arbitrary code from a remote location.