Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability

====================================================================== Secunia Research 16/10/2007 - IrfanView Palette File Importing Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2007-4343

The vulnerability CVE-2007-4343 affects IrfanView 3.99 and 4.00 and is a stack-based buffer overflow in the handling of palette (*.pal) files. This boundary error can be triggered by a crafted palette file, enabling user-assisted remote code execution. Impact is described as arbitrary code execut...