CVE-2009-0197

CVE-2009-0197 concerns IrfanView’s Formats plug-in: an integer overflow in XPM parsing before version 4.23 leading to a heap-based overflow. This can allow remote code execution or cause a denial of service (application crash) when a specially crafted large XPM file is opened. The vulnerability s...

Secunia Research: IrfanView Formats Plug-in XPM Parsing Integer Overflow

====================================================================== Secunia Research 07/04/2009 - IrfanView Formats Plug-in XPM Parsing Integer Overflow - ====================================================================== Table of Contents Affected...