NetSight
high7.6

CVE-2013-6932

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code vi…

Impact

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window.

Affected products

VendorProductAffected versions
IrfanviewIrfanview
through 4.36
Versions 4.00, 4.10, 4.20, 4.23, 4.25

Weakness classification

References