CVE-2012-0278

CVE-2012-0278 concerns the IrfanView FlashPix PlugIn (Fpx.dll). The Nessus plugin indicates that versions of the FlashPix plugin prior to 4.34 are affected by a heap-based buffer overflow triggered by processing a crafted .fpx image during decompression. Successful exploitation could allow arbitr...

CVE-2013-3486

The CVE-2013-3486 entry concerns IrfanView FlashPix Plugin. Affected component: FlashPix plugin (Fpx.dll) in IrfanView. Root cause: integer overflow in Summary Information Property Set handling, leading to a heap-based buffer overflow. Impact: potential denial of service or arbitrary code executi...

CVE-2012-0025

The CVE-2012-0025 entry describes a double-free vulnerability in libfpx’s Free_All_Memory function (jpeg/dectile.c) used by FlashPix PlugIn 4.2.2.0 with IrfanView. A crafted FPX image could cause a remote DoS (crash). Affected: libfpx prior to 1.3.1-1; remediation per the Gentoo GLSA advises upgr...