KLA10229 ACE vulnerabilities in IrfanView

A buffer overflow was found in IrfanView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed GIF file or a specially designed thumbnail in the file.

Original advisories

IrfanView changelog

Related products

IrfanView

CVE list

CVE-2013-6932 critical

CVE-2013-5351 critical

Solution

Update to latest version

IrfanView

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• IrfanView versions 4.36 and earlier