CVE-2013-3946

CVE-2013-3946 describes a heap-based buffer overflow vulnerability in the MrSID plugin (MrSID.dll) for IrfanView, specifically versions prior to 4.37. This flaw allows remote attackers to execute arbitrary code on a user's system by crafting a malicious levels header within a MrSID image file. Rated with a CVSS score of 7.8 (High), this vulnerability requires user interaction (UI:R) to trigger, typically by opening a specially crafted file. Successful exploitation could lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting a low profile in the threat landscape.