CVE-2013-3944

ALTO 7.8CVE-2013-3944 · Published 02/01/2020 · updated 16/06/2026

Package	Affected versions	Patched versions
mrsid extensis	`< 4.37`	`4.37`

Description

Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.

References

securityfocus.com/bid/64385 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/89804 · Third Party Advisory
irfanview.com/history_old.htm · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free