CVE-2012-5904

CVE-2012-5904 describes a heap-based buffer overflow in IrfanView prior to 4.33 that can be triggered by processing a crafted RLE-compressed bitmap (DIB/RLE/BMP). The issue allows remote code execution and arises from the way the application handles RLE bitmap data. Public references (NVD, CVE li...

IrfanView < 4.33 Boundary Error Multiple Image File Handling Remote Overflow

The remote Windows host contains a version of IrfanView earlier than 4.33. As such, it is reportedly affected by a heap-based buffer overflow vulnerability due to the way the application handles RLE compressed bitmap files. An attacker could trick a user into opening specially crafted DIB, RLE, o...