IrfanView Formats Plugin ECW Plugin File Handling Buffer Overflow Vulnerability

The version of the IrfanView Formats ECW plugin NCSEcw.dll was found to be less than 4.34. Such versions are affected by a heap-based buffer overflow caused by insufficient validation when decompressing ECW images. An attacker could exploit this vulnerability to execute arbitrary code by tricking...