{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-05-12T00:00:00", "descriptions": [{"lang": "en", "value": "IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a \"sign-extension error.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2010-41"}, {"name": "20100512 Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/511274/100/0/threaded"}, {"name": "39036", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/39036"}, {"name": "64627", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/64627"}, {"name": "oval:org.mitre.oval:def:6705", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6705"}, {"name": "40104", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/40104"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://irfanview.com/main_history.htm"}, {"name": "irfanview-psd-bo(58548)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58548"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2010-1509", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a \"sign-extension error.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://secunia.com/secunia_research/2010-41", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2010-41"}, {"name": "20100512 Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/511274/100/0/threaded"}, {"name": "39036", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/39036"}, {"name": "64627", "refsource": "OSVDB", "url": "http://osvdb.org/64627"}, {"name": "oval:org.mitre.oval:def:6705", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6705"}, {"name": "40104", "refsource": "BID", "url": "http://www.securityfocus.com/bid/40104"}, {"name": "http://irfanview.com/main_history.htm", "refsource": "CONFIRM", "url": "http://irfanview.com/main_history.htm"}, {"name": "irfanview-psd-bo(58548)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58548"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T01:28:41.302Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2010-41"}, {"name": "20100512 Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/511274/100/0/threaded"}, {"name": "39036", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/39036"}, {"name": "64627", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/64627"}, {"name": "oval:org.mitre.oval:def:6705", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6705"}, {"name": "40104", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/40104"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://irfanview.com/main_history.htm"}, {"name": "irfanview-psd-bo(58548)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58548"}]}]}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2010-1509", "datePublished": "2010-05-14T19:24:00", "dateReserved": "2010-04-26T00:00:00", "dateUpdated": "2024-08-07T01:28:41.302Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*", "matchCriteriaId": "3278A555-1B0A-481E-930B-8851B3417CA1", "versionEndIncluding": "4.25", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.70:*:*:*:*:*:*:*", "matchCriteriaId": "7B5AC2D0-D6A6-40A3-8271-ACB0A242CBBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.75:*:*:*:*:*:*:*", "matchCriteriaId": "608B2244-7540-4B6A-B1B0-80C876D561C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.80:*:*:*:*:*:*:*", "matchCriteriaId": "069EA695-B5C5-4C57-98C8-E03793AC60F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.85:*:*:*:*:*:*:*", "matchCriteriaId": "A9F96F9E-5CE6-4B50-812C-1BB27F5DB65B", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.90:*:*:*:*:*:*:*", "matchCriteriaId": "778DAC6D-12C1-470A-BBC4-62CAE0F0BA7C", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.95:*:*:*:*:*:*:*", "matchCriteriaId": "CA9869CE-BCE4-4915-A4F2-7D429F98F37A", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.97:*:*:*:*:*:*:*", "matchCriteriaId": "F9771B28-A7BC-42B5-BA24-63727CE0EBE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.98:*:*:*:*:*:*:*", "matchCriteriaId": "51705801-EA1E-4E0E-AF6A-2EBE49556DAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.98a:*:*:*:*:*:*:*", "matchCriteriaId": "DE0A6535-183B-48D8-BB93-4E4D392D840E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:1.99:*:*:*:*:*:*:*", "matchCriteriaId": "4BE7AF00-42F3-4483-BC34-B24F1C328F49", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.00:*:*:*:*:*:*:*", "matchCriteriaId": "1DF2CFFB-B79A-4554-A57C-2E675B65D52B", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.05:*:*:*:*:*:*:*", "matchCriteriaId": "05DB3B2A-4FC0-4AA5-AE9A-E8242795E31E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.07:*:*:*:*:*:*:*", "matchCriteriaId": "C24720C1-DA36-4A95-BC70-2CB98B8D0FBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.10:*:*:*:*:*:*:*", "matchCriteriaId": "A18B1613-378A-483B-8BCE-D013CF24F200", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.12:*:*:*:*:*:*:*", "matchCriteriaId": "28F0AB90-6123-4E1B-BBED-B7BD1478668C", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.15:*:*:*:*:*:*:*", "matchCriteriaId": "5DA19D23-2907-42F2-A1BF-348AF1F8FC3C", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.17:*:*:*:*:*:*:*", "matchCriteriaId": "125360D8-8959-46B8-9977-BF1D03BA55CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.18:*:*:*:*:*:*:*", "matchCriteriaId": "F2C63D78-6152-42CC-BD5B-98AA34727BE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.20:*:*:*:*:*:*:*", "matchCriteriaId": "369C42FA-DF57-4453-A3F8-BC93257D415E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.22:*:*:*:*:*:*:*", "matchCriteriaId": "59923D0D-E3B4-4C59-B167-D59522C332EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.25:*:*:*:*:*:*:*", "matchCriteriaId": "070AE76D-E1A6-4532-B67F-EC1AF2E67AC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.27:*:*:*:*:*:*:*", "matchCriteriaId": "3285C557-FAEB-4604-BF33-E42693B6545D", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.30:*:*:*:*:*:*:*", "matchCriteriaId": "050B6B28-11D9-4D06-B6C3-0A26769B73F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.32:*:*:*:*:*:*:*", "matchCriteriaId": "82744B9A-2989-45D2-B144-47C78384B556", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.35:*:*:*:*:*:*:*", "matchCriteriaId": "AE235D0D-52FA-4E58-BD98-75F8452A8F0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.37:*:*:*:*:*:*:*", "matchCriteriaId": "242E8825-7E8F-4883-BDAA-10B7775CD298", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.40:*:*:*:*:*:*:*", "matchCriteriaId": "0C28B2DC-0C5A-45C5-A6F6-2E0485C27299", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.50:*:*:*:*:*:*:*", "matchCriteriaId": "F78602D6-A56B-4EF7-AD89-74DD67C716CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.52:*:*:*:*:*:*:*", "matchCriteriaId": "D2163005-6B7C-4899-8770-AEB07DB4C522", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.55:*:*:*:*:*:*:*", "matchCriteriaId": "660EEA7C-664C-4BDD-BAE4-03B42FF52F80", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.60:*:*:*:*:*:*:*", "matchCriteriaId": "7FC20487-0A24-4536-A3CE-4A00B2182F18", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.62:*:*:*:*:*:*:*", "matchCriteriaId": "B2A71AE3-3B95-40CA-8955-14DC374D859B", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.63:*:*:*:*:*:*:*", "matchCriteriaId": "7D08F804-5ED8-49BC-A5F0-50DC873B1A72", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.65:*:*:*:*:*:*:*", "matchCriteriaId": "BEFD6493-AC2A-4628-BC20-D85F42E98A7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.66:*:*:*:*:*:*:*", "matchCriteriaId": "87E28602-8072-4881-867D-A870E441316D", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.68:*:*:*:*:*:*:*", "matchCriteriaId": "5AB81B36-E878-4A02-BE99-DCF025E20CEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.80:*:*:*:*:*:*:*", "matchCriteriaId": "F6DE3D7C-DF35-4921-B240-265E7825EA93", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.82:*:*:*:*:*:*:*", "matchCriteriaId": "4FBECB19-B064-4DD1-87F4-A4AF47E4502E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.83:*:*:*:*:*:*:*", "matchCriteriaId": "AFE0D6AE-6CB5-49C6-8B59-BEA4CDE23292", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.85:*:*:*:*:*:*:*", "matchCriteriaId": "F3E4C52B-FE56-4422-BEA3-F534AC855CEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.90:*:*:*:*:*:*:*", "matchCriteriaId": "72BB9CBF-BA33-42F3-875D-CFB527E877AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.92:*:*:*:*:*:*:*", "matchCriteriaId": "60ADDB85-60FB-4226-A8D3-A78650478FE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.95:*:*:*:*:*:*:*", "matchCriteriaId": "1A24DB1B-A1CB-4005-BF1B-B81DC83E42CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.97:*:*:*:*:*:*:*", "matchCriteriaId": "0D5C86C3-D914-4C12-9408-381D9F349AEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:2.98:*:*:*:*:*:*:*", "matchCriteriaId": "819E7311-7452-484B-8BE0-901C49E043CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.00:*:*:*:*:*:*:*", "matchCriteriaId": "15187176-FD8E-4147-AE84-8D9A57853A40", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.02:*:*:*:*:*:*:*", "matchCriteriaId": "92AA2459-7D9D-41A2-A08A-41AAF892CEF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.05:*:*:*:*:*:*:*", "matchCriteriaId": "C4D44A34-BDDC-4AF8-BE32-095EA55F5709", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.07:*:*:*:*:*:*:*", "matchCriteriaId": "4D74B745-5E26-486F-94CA-3904BDECA7FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.10:*:*:*:*:*:*:*", "matchCriteriaId": "BE8AFE10-C6EB-4767-B179-DD74449D8F3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.12:*:*:*:*:*:*:*", "matchCriteriaId": "417E0560-88EC-4AD7-9D66-21B76773C974", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.15:*:*:*:*:*:*:*", "matchCriteriaId": "7E36728A-5EB8-4C91-8BB0-EAB93C7042D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.17:*:*:*:*:*:*:*", "matchCriteriaId": "2A02C59C-2ECF-4221-9BA9-C8044380BBE7", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.20:*:*:*:*:*:*:*", "matchCriteriaId": "4A1D6C64-C2D4-481A-A337-FDB0F9F840F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.21:*:*:*:*:*:*:*", "matchCriteriaId": "B257EFB2-0694-4704-8BA1-63CCC1530B1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.25:*:*:*:*:*:*:*", "matchCriteriaId": "0AB01D76-C2CD-48EE-8AD9-A79DAB4CA26E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.30:*:*:*:*:*:*:*", "matchCriteriaId": "06CEDC86-9B7D-4214-BF99-16E70D414268", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.33:*:*:*:*:*:*:*", "matchCriteriaId": "3BB76F6F-2473-4E7E-8BA5-06A34CF9F68E", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.35:*:*:*:*:*:*:*", "matchCriteriaId": "8C2A7D99-F807-4655-AAE9-35529632351D", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.36:*:*:*:*:*:*:*", "matchCriteriaId": "5C97A5E6-3982-486C-8B98-1886F19C9EFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.50:*:*:*:*:*:*:*", "matchCriteriaId": "1A973DBB-7863-4151-831A-32D3FF4582B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.51:*:*:*:*:*:*:*", "matchCriteriaId": "CC6DC7D1-E198-45AB-9B5A-82E4A5E607AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.60:*:*:*:*:*:*:*", "matchCriteriaId": "5B577814-CF78-416B-927F-13B75573CD07", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.61:*:*:*:*:*:*:*", "matchCriteriaId": "C33F00BC-A90C-4078-8009-3B76EDE1304A", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.70:*:*:*:*:*:*:*", "matchCriteriaId": "94194E7B-88A1-4902-ABDB-880A33021106", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.75:*:*:*:*:*:*:*", "matchCriteriaId": "0CDBB8F3-79C0-40B1-931D-6A91F0BE88A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.80:*:*:*:*:*:*:*", "matchCriteriaId": "FEB6E674-EE17-4589-8C12-B5D184F4F7D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.85:*:*:*:*:*:*:*", "matchCriteriaId": "9F3F33FB-51AE-4632-9797-623EED02CBB7", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.90:*:*:*:*:*:*:*", "matchCriteriaId": "36DE03F4-B43E-4ABE-9218-86760400FD40", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.91:*:*:*:*:*:*:*", "matchCriteriaId": "302853B4-9FB8-430C-8C69-EFCCDD2C4380", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.92:*:*:*:*:*:*:*", "matchCriteriaId": "6806E555-A3E5-4B8D-94B4-40BE4A549311", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.95:*:*:*:*:*:*:*", "matchCriteriaId": "D5A2AF49-C8CE-4CEB-9154-EB47366E71AC", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.97:*:*:*:*:*:*:*", "matchCriteriaId": "0D5981E4-CA70-4760-8D58-16BC983E5034", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*", "matchCriteriaId": "DB8391AF-D227-437B-9DF0-E8FF82A625CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:3.99:*:*:*:*:*:*:*", "matchCriteriaId": "BBB69385-44C6-41FD-924D-F577B862F74D", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*", "matchCriteriaId": "535174D3-2470-4FF3-827B-70737F6872FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*", "matchCriteriaId": "93312055-0238-4082-A3E0-E2E50491103A", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*", "matchCriteriaId": "E5F225C4-EEFA-4DEE-81AA-BB69172FAE0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.22:*:*:*:*:*:*:*", "matchCriteriaId": "1AAAC6C0-F058-43D7-9F8D-D0B99B5D6C86", "vulnerable": true}, {"criteria": "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*", "matchCriteriaId": "FC85E443-08AE-4222-9807-9C2514713C54", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a \"sign-extension error.\""}, {"lang": "es", "value": "IrfanView en versiones anteriores a la 4.27 no maneja adecuadamente una variable de entero no especificada durante el procesamiento de imagenes PSD ,lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo de su elecci\u00f3n mediante un fichero de imagen manipulado que dispara un desbordamiento de b\u00fafer basado en memoria din\u00e1mica, relacionado con \"sign-extension error.\""}], "id": "CVE-2010-1509", "lastModified": "2018-10-10T19:57:19.400", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-05-14T19:30:01.327", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://irfanview.com/main_history.htm"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://osvdb.org/64627"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/39036"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2010-41"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/511274/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/bid/40104"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58548"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6705"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}