medium4.3Public exploit code
CVE-2011-5233
Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" valu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IrfanView - '.tiff' Image Processing Buffer Overflow2011-12-20 · dos · windows · Verified
Impact
Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" values in a TIFF image file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Irfanview | Irfanview | through 4.30 Versions 3.90, 3.91, 3.92, 3.95, 3.97 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/47065
- http://www.exploit-db.com/exploits/18257
- http://www.irfanview.com/history_old.htm
- http://www.osvdb.org/77957
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=30&Itemid=30
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71891
- http://secunia.com/advisories/47065
- http://www.exploit-db.com/exploits/18257
- http://www.irfanview.com/history_old.htm
- http://www.osvdb.org/77957
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=30&Itemid=30
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71891