IrfanView is prone to a denial-of-service vulnerability. A remote attacker may crash the application, resulting in denial-of-service conditions to legitimate users. This issue may potentially be exploited to execute arbitrary machine code, but this has not been confirmed.