CVE-2010-1509

{"id": "CVE-2010-1509", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-05-14T19:30:01.327", "references": [{"url": "http://irfanview.com/main_history.htm", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://osvdb.org/64627", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://secunia.com/advisories/39036", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://secunia.com/secunia_research/2010-41", "tags": ["Vendor Advisory"], "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://www.securityfocus.com/archive/1/511274/100/0/threaded", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "http://www.securityfocus.com/bid/40104", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58548", "source": "PSIRT-CNA@flexerasoftware.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6705", "source": "PSIRT-CNA@flexerasoftware.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a \"sign-extension error.\""}, {"lang": "es", "value": "IrfanView en versiones anteriores a la 4.27 no maneja adecuadamente una variable de entero no especificada durante el procesamiento de imagenes PSD ,lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo de su elecci\u00f3n mediante un fichero de imagen manipulado que dispara un desbordamiento de b\u00fafer basado en memoria din\u00e1mica, relacionado con \"sign-extension error.\""}], "lastModified": "2018-10-10T19:57:19.400", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3278A555-1B0A-481E-930B-8851B3417CA1", "versionEndIncluding": "4.25"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B5AC2D0-D6A6-40A3-8271-ACB0A242CBBE"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.75:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "608B2244-7540-4B6A-B1B0-80C876D561C7"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "069EA695-B5C5-4C57-98C8-E03793AC60F5"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.85:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9F96F9E-5CE6-4B50-812C-1BB27F5DB65B"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "778DAC6D-12C1-470A-BBC4-62CAE0F0BA7C"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA9869CE-BCE4-4915-A4F2-7D429F98F37A"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.97:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9771B28-A7BC-42B5-BA24-63727CE0EBE4"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.98:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51705801-EA1E-4E0E-AF6A-2EBE49556DAA"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.98a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE0A6535-183B-48D8-BB93-4E4D392D840E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.99:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BE7AF00-42F3-4483-BC34-B24F1C328F49"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DF2CFFB-B79A-4554-A57C-2E675B65D52B"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05DB3B2A-4FC0-4AA5-AE9A-E8242795E31E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.07:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C24720C1-DA36-4A95-BC70-2CB98B8D0FBF"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A18B1613-378A-483B-8BCE-D013CF24F200"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28F0AB90-6123-4E1B-BBED-B7BD1478668C"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DA19D23-2907-42F2-A1BF-348AF1F8FC3C"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "125360D8-8959-46B8-9977-BF1D03BA55CA"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2C63D78-6152-42CC-BD5B-98AA34727BE2"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "369C42FA-DF57-4453-A3F8-BC93257D415E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59923D0D-E3B4-4C59-B167-D59522C332EE"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "070AE76D-E1A6-4532-B67F-EC1AF2E67AC9"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3285C557-FAEB-4604-BF33-E42693B6545D"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "050B6B28-11D9-4D06-B6C3-0A26769B73F6"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82744B9A-2989-45D2-B144-47C78384B556"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE235D0D-52FA-4E58-BD98-75F8452A8F0F"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "242E8825-7E8F-4883-BDAA-10B7775CD298"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C28B2DC-0C5A-45C5-A6F6-2E0485C27299"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F78602D6-A56B-4EF7-AD89-74DD67C716CB"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2163005-6B7C-4899-8770-AEB07DB4C522"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.55:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "660EEA7C-664C-4BDD-BAE4-03B42FF52F80"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FC20487-0A24-4536-A3CE-4A00B2182F18"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.62:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2A71AE3-3B95-40CA-8955-14DC374D859B"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.63:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D08F804-5ED8-49BC-A5F0-50DC873B1A72"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.65:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEFD6493-AC2A-4628-BC20-D85F42E98A7B"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.66:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E28602-8072-4881-867D-A870E441316D"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.68:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AB81B36-E878-4A02-BE99-DCF025E20CEC"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6DE3D7C-DF35-4921-B240-265E7825EA93"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.82:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FBECB19-B064-4DD1-87F4-A4AF47E4502E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.83:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFE0D6AE-6CB5-49C6-8B59-BEA4CDE23292"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.85:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3E4C52B-FE56-4422-BEA3-F534AC855CEF"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72BB9CBF-BA33-42F3-875D-CFB527E877AB"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60ADDB85-60FB-4226-A8D3-A78650478FE3"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A24DB1B-A1CB-4005-BF1B-B81DC83E42CD"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.97:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D5C86C3-D914-4C12-9408-381D9F349AEF"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.98:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "819E7311-7452-484B-8BE0-901C49E043CF"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15187176-FD8E-4147-AE84-8D9A57853A40"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92AA2459-7D9D-41A2-A08A-41AAF892CEF6"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4D44A34-BDDC-4AF8-BE32-095EA55F5709"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.07:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D74B745-5E26-486F-94CA-3904BDECA7FA"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE8AFE10-C6EB-4767-B179-DD74449D8F3E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "417E0560-88EC-4AD7-9D66-21B76773C974"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E36728A-5EB8-4C91-8BB0-EAB93C7042D1"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A02C59C-2ECF-4221-9BA9-C8044380BBE7"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A1D6C64-C2D4-481A-A337-FDB0F9F840F1"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B257EFB2-0694-4704-8BA1-63CCC1530B1A"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AB01D76-C2CD-48EE-8AD9-A79DAB4CA26E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06CEDC86-9B7D-4214-BF99-16E70D414268"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BB76F6F-2473-4E7E-8BA5-06A34CF9F68E"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C2A7D99-F807-4655-AAE9-35529632351D"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C97A5E6-3982-486C-8B98-1886F19C9EFB"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A973DBB-7863-4151-831A-32D3FF4582B0"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.51:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC6DC7D1-E198-45AB-9B5A-82E4A5E607AF"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B577814-CF78-416B-927F-13B75573CD07"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.61:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C33F00BC-A90C-4078-8009-3B76EDE1304A"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94194E7B-88A1-4902-ABDB-880A33021106"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.75:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CDBB8F3-79C0-40B1-931D-6A91F0BE88A0"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEB6E674-EE17-4589-8C12-B5D184F4F7D7"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.85:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F3F33FB-51AE-4632-9797-623EED02CBB7"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36DE03F4-B43E-4ABE-9218-86760400FD40"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.91:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "302853B4-9FB8-430C-8C69-EFCCDD2C4380"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6806E555-A3E5-4B8D-94B4-40BE4A549311"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5A2AF49-C8CE-4CEB-9154-EB47366E71AC"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.97:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D5981E4-CA70-4760-8D58-16BC983E5034"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB8391AF-D227-437B-9DF0-E8FF82A625CB"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.99:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBB69385-44C6-41FD-924D-F577B862F74D"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "535174D3-2470-4FF3-827B-70737F6872FE"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93312055-0238-4082-A3E0-E2E50491103A"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5F225C4-EEFA-4DEE-81AA-BB69172FAE0B"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AAAC6C0-F058-43D7-9F8D-D0B99B5D6C86"}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC85E443-08AE-4222-9807-9C2514713C54"}], "operator": "OR"}]}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"}