CVE-2012-3585

2012-07-0522:55:01

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.09

Percentile

94.7%

JSON

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

Affected configurations

Nvd

Node

irfanviewirfanview_pluginsRange≤4.33

AND

irfanviewirfanview

VendorProductVersionCPE
irfanviewirfanview_plugins*cpe:2.3:a:irfanview:irfanview_plugins:*:*:*:*:*:*:*:*
irfanviewirfanview*cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*