3516 matches found
IrfanView远程缓冲区溢出漏洞
BUGTRAQ ID: 64561 CVECAN ID: CVE-2013-6932 IrfanView是一款快速、免费的图像查看器、浏览器、转换器。FORMATS插件可允许IrfanView读取不常见图形格式。 IrfanView 4.36及其他版本在实现上存在缓冲区溢出漏洞，使用了多字节的目录名称后，远程攻击者通过缩略图窗口内的缩略图提示信息功能所处理过的特制文件，利用此漏洞可执行任意代码。 0 IrfanView IrfanView 4.37 厂商补丁： IrfanView --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2013-6932
Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...
Buffer overflow
Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...
CVE-2013-6932
CVE-2013-6932 affects IrfanView up to version 4.37. A buffer overflow occurs when handling a crafted file in the Thumbnails window’s Tooltip feature with a folder name containing multibyte characters, enabling user-assisted remote code execution. Multiple sources (NVD/NJVM/JVN/JVNDB, Nessus/Tenab...
CVE-2013-6932
Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...
IrfanView vulnerable to buffer overflow
Overview IrfanView is an application for viewing images of many different file formats. IrfanView contains a buffer overflow vulnerability, when using the Thumbnails window with Thumbnail tooltips enabled. Asuka Nakajima of NTT Secure Platform Laboratories reported this vulnerability to IPA...
JVN#63194482: IrfanView vulnerable to buffer overflow
IrfanView is an application for viewing images of many different file formats. IrfanView contains a buffer overflow vulnerability, when using the Thumbnails window with Thumbnail tooltips enabled. Impact When processing a specially crafted file contained in a folder named using multi-byte...
IrfanView Formats插件'MrSID.dll'栈缓冲区溢出漏洞
BUGTRAQ ID: 64385 CVECAN ID: CVE-2013-3944 IrfanView是一款快速、免费的图像查看器、浏览器、转换器。FORMATS插件可允许IrfanView读取不常见图形格式。 Formats PlugIn 4.36版本处理 "IMAGE::" 标签中，MrSID插件MrSID.dll存在边界错误，成功利用后可造成栈缓冲区溢出。 0 IrfanView Formats Plug-in 4.36 厂商补丁： IrfanView --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
KLA10229 ACE vulnerabilities in IrfanView
A buffer overflow was found in IrfanView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed GIF file or a specially designed thumbnail in the file. Original advisories IrfanView changelog Related...
Irfanview JPEG2000 jp2 Stack Buffer Overflow (CVE-2012-0897)
A buffer overflow vulnerability has been reported in Irfanview JPEG2000 v4.3.2.0 jp2 QCD parsing...
IrfanView < 4.36 Multiple Vulnerabilities
The remote Windows host contains a version of IrfanView prior to version 4.36. It is, therefore, reportedly affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists when parsing ANI images. An attacker can exploit this issue with a specially crafted ANI file,...
IrfanView FlashPix Plugin < 4.36 Summary Information Property Set Handling Integer Overflow
The version of the IrfanView FlashPix plugin Fpx.dll was found to be earlier than 4.36. As such, it is affected by an integer overflow error within the 'Fpx.dll' module. The 'Summary Information Property Set' is not properly validated, which could result in a heap-based buffer overflow, allowing ...
IrfanView ImXCF.dll XCF File Handling Overflow
The version of the XCF plugin ImXCF.dll for IrfanView is earlier than 1.8.0.1314. As such, it reportedly is affected by a stack-based buffer overflow caused by insufficient validation when processing XCF files. An attacker could exploit this vulnerability to execute arbitrary code by tricking a...
IrfanView 4.33 - IMXCF.dll Plugin Code Execution
IrfanView 4.33 - IMXCF.dll Plugin Code Execution From the simple.xcf file, 0x004ABABC will overwrite eip. Tested on Windows XP SP3 and Windows 7 x64. Fixed in the current release IrfanView 4.35: 1 Shellcode from 2 Old version installer at 3 4. 1 http://www.irfanview.com/mainhistory.htm 2...
IrfanView 4.33 - 'IMXCF.dll' Plugin Code Execution
From the simple.xcf file, 0x004ABABC will overwrite eip. Tested on Windows XP SP3 and Windows 7 x64. Fixed in the current release IrfanView 4.35: 1 Shellcode from 2 Old version installer at 3 4. 1 http://www.irfanview.com/mainhistory.htm 2 http://code.google.com/p/win-exec-calc-shellcode/ 3...
IrfanView < 4.35 Multiple Heap-Based Buffer Overflows
The remote Windows host contains a version of IrfanView prior to version 4.35. It is, therefore, reportedly affected by the following vulnerabilities : - An error exists related to 'ImageWidth' value handling in JPEG compressed TIFF images. - An error exists related to 'End of Line' marker handli...
CVE-2012-5904
Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...
CVE-2012-5904
Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...
CVE-2012-5904
CVE-2012-5904 describes a heap-based buffer overflow in IrfanView prior to 4.33 that can be triggered by processing a crafted RLE-compressed bitmap (DIB/RLE/BMP). The issue allows remote code execution and arises from the way the application handles RLE bitmap data. Public references (NVD, CVE li...
IrfanView - .RLE Image Decompression Buffer Overflow
IrfanView - .RLE Image Decompression Buffer Overflow Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number:...