NetSight
high7.5

CVE-2013-5351

Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file.

Impact

Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file.

Affected products

VendorProductAffected versions
IrfanviewIrfanview
through 4.36
Versions 1.70, 1.75, 1.80, 1.85, 1.90

Weakness classification

References