EUVD-2013-6733

Malware in sbrugna...

IrfanView < 4.37 Multiple Buffer Overflow Vulnerabilities

The remote Windows host contains a version of IrfanView prior to version 4.37. It is, therefore, reportedly affected by multiple buffer overflow vulnerabilities : - A boundary error exists when handling the LZW code stream within GIF files that could lead to arbitrary code execution. CVE-2013-535...

CVE-2013-6932

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...

Buffer overflow

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...

PT-2013-6192

Name of the Vulnerable Software and Affected Versions IrfanView versions prior to 4.37 Description The issue arises from a buffer overflow when IrfanView handles a crafted file with a multibyte-character directory name in the Thumbnails window, specifically through the Thumbnail tooltips feature...

CVE-2013-6932: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...