CVE-2013-3486

CriticalCVSS 9.6/10Last modified Jun 16, 2026

Description

IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
IrfanView FlashPix PlugInIrfanView FlashPix PlugIn4.3

References

Timeline

Published
Jan 27, 2020
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-34874.3Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow reCVE-2013-34887.8Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary coCVE-2013-34897.8Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted CVE-2013-34916.8Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the aCVE-2013-34929.8XnView 2.03 has a stack-based buffer overflow vulnerabilityCVE-2013-34939.8XnView 2.03 has an integer overflow vulnerabilityCVE-2013-34947.8A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external librariesCVE-2013-34954.7The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a mCVE-2013-34967.2Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, CVE-2013-34974.7Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configurationCVE-2013-34984.3Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attacCVE-2013-34997.5GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain
CVE-2013-3486: Critical severity, CVSS 9.6 | Vulnix