NetSight
IP …
critical9.3Public exploit code

CVE-2012-0278

Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containin…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression.

Affected products

VendorProductAffected versions
IrfanviewFlashpix Plugin
through 4.33
Version 4.32

Weakness classification

CWE-119

References