Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.
Max CVSS
6.8
EPSS Score
7.31%
Published
2012-11-17
Updated
2017-08-29
CVE-2012-0897
Public exploit
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
Max CVSS
6.8
EPSS Score
94.30%
Published
2012-01-20
Updated
2017-08-29
Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" values in a TIFF image file.
Max CVSS
4.3
EPSS Score
12.16%
Published
2012-10-25
Updated
2017-08-29
3 vulnerabilities found