Flashpix Plugin

Vendor:

First CVE: Apr 18, 2012 · Active for 14 years

3
Total CVEs
More Total CVEs than 64% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 56% of tracked products
8.6
Avg CVSS
Higher Avg CVSS than 76% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Flashpix Plugin over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 18, 2012
14 years ago
Most Recent CVE
Jan 27, 2020
2,371 days ago

CVE Severity & Scoring

Flashpix Plugin3 CVEs
All CVEs352,708 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network1 (33.3%)
Unknown2 (66.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (33.3%)
High0 (0.0%)
Unknown2 (66.7%)
User Interaction
None0 (0.0%)
Unknown2 (66.7%)
Required1 (33.3%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (33.3%)
Unknown2 (66.7%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix
Apr 18, 20129.342NOYES
Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers
Nov 2, 20126.834NOYES
IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability
Jan 27, 20209.629NONO

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
66.7% of CVEs· 93rd percentile

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For Flashpix Plugin

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
4.3.4.019.61.8%00
4.3219.310.2%01
4.2.2.016.86.4%01