critical9.3Public exploit code
CVE-2012-3585
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to ex…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IrfanView JLS Formats PlugIn - Heap Overflow2012-06-30 · dos · windows
Impact
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Irfanview | Irfanview Plugins | through 4.33 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html
- http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html
- http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html