vendor:
IrfanView Plugins
by:
Joseph Sheridan
7,8
CVSS
HIGH
Heap-Based Buffer Overflow
119
CWE
Product Name: IrfanView Plugins
Affected Version From: Irfanview Plugins version 4.33
Affected Version To: Irfanview Plugins version 4.33
Patch Exists: YES
Related CWE: CVE-2012-3585
CPE: a:irfan_skiljan:irfanview_plugins
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2012
IrfanView Formats PlugIn Heap-Based Buffer Overflow
IrfanView Formats PlugIn is prone to an overflow condition. The JLS Plugin (jpeg_ls.dll) library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a context-dependent attacker could potentially execute arbitrary code.
Mitigation:
Upgrade to Irfanview Plugins version 4.34
