medium6.8Public exploit code
CVE-2012-0897
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IrfanView JPEG2000 4.3.2.0 - jp2 Stack Buffer Overflow (Metasploit)2012-07-01 · local · windows · Verified
Impact
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Irfanview | Irfanview | through 4.32 Versions 1.70, 1.75, 1.80, 1.85, 1.90 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/78333
- http://secunia.com/advisories/47360
- http://www.irfanview.com/history_old.htm
- http://www.securityfocus.com/bid/51426
- http://www.securitytracker.com/id/1032529
- http://www.securitytracker.com/id/1032530
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72398
- http://osvdb.org/78333
- http://secunia.com/advisories/47360
- http://www.irfanview.com/history_old.htm
- http://www.securityfocus.com/bid/51426
- http://www.securitytracker.com/id/1032529
- http://www.securitytracker.com/id/1032530
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72398