Buffer overflow in Irfanview
CVE-2012-3585
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.
Vulnerability class: Buffer Overflow
EPSS: 0.077 (94.0th percentile) — read the EPSS interpretation.
Affected products
- Irfanview
- Irfanview Irfanview_plugins
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)