Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

irfanview irfanview 4.23 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2009-2118
Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote malicious users to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow.
Irfanview Irfanview 4.23
7.6
CVSSv2
CVE-2013-6932
Buffer overflow in IrfanView prior to 4.37, when a multibyte-character directory name is used, allows user-assisted remote malicious users to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window.
Irfanview Irfanview 4.28Irfanview Irfanview 4.32Irfanview Irfanview 4.30Irfanview IrfanviewIrfanview Irfanview 4.23Irfanview Irfanview 4.27Irfanview Irfanview 4.35Irfanview Irfanview 4.20Irfanview Irfanview 4.25Irfanview Irfanview 4.33Irfanview Irfanview 4.00Irfanview Irfanview 4.10
4.3
CVSSv2
CVE-2011-5233
Heap-based buffer overflow in IrfanView prior to 4.32 allows remote malicious users to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" values in a TIFF image file.
Irfanview Irfanview 4.28Irfanview Irfanview 4.27Irfanview Irfanview 3.97Irfanview Irfanview 3.95Irfanview Irfanview 4.25Irfanview Irfanview 4.23Irfanview Irfanview 3.92Irfanview Irfanview 3.91Irfanview Irfanview 4.20Irfanview Irfanview 4.10Irfanview Irfanview 3.90Irfanview IrfanviewIrfanview Irfanview 4.00Irfanview Irfanview 3.99Irfanview Irfanview 3.98
6.8
CVSSv2
CVE-2012-5904
Heap-based buffer overflow in IrfanView prior to 4.33 allows remote malicious users to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.
Irfanview Irfanview 4.28Irfanview Irfanview 4.27Irfanview Irfanview 3.98Irfanview Irfanview 3.97Irfanview Irfanview 3.75Irfanview Irfanview 3.70Irfanview Irfanview 3.30Irfanview Irfanview 3.25Irfanview Irfanview 3.07Irfanview Irfanview 3.05Irfanview Irfanview 2.90Irfanview Irfanview 2.85Irfanview Irfanview 2.60Irfanview Irfanview 2.55Irfanview Irfanview 2.30Irfanview Irfanview 2.27Irfanview Irfanview 2.12Irfanview Irfanview 2.10Irfanview Irfanview 2.07Irfanview Irfanview 1.95Irfanview Irfanview 1.90Irfanview Irfanview
5
CVSSv2
CVE-2010-1509
IrfanView prior to 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-...
Irfanview IrfanviewIrfanview Irfanview 4.23Irfanview Irfanview 3.97Irfanview Irfanview 3.95Irfanview Irfanview 3.61Irfanview Irfanview 3.60Irfanview Irfanview 3.25Irfanview Irfanview 3.21Irfanview Irfanview 3.05Irfanview Irfanview 3.02Irfanview Irfanview 2.83Irfanview Irfanview 2.82Irfanview Irfanview 2.60Irfanview Irfanview 2.55Irfanview Irfanview 2.30Irfanview Irfanview 2.27Irfanview Irfanview 2.10Irfanview Irfanview 2.07Irfanview Irfanview 1.95Irfanview Irfanview 1.90Irfanview Irfanview 4.22Irfanview Irfanview 4.20
5
CVSSv2
CVE-2010-1510
Heap-based buffer overflow in IrfanView prior to 4.27 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PSD image with RLE compression.
Irfanview IrfanviewIrfanview Irfanview 4.23Irfanview Irfanview 3.95Irfanview Irfanview 3.92Irfanview Irfanview 3.61Irfanview Irfanview 3.60Irfanview Irfanview 3.25Irfanview Irfanview 3.21Irfanview Irfanview 3.20Irfanview Irfanview 3.02Irfanview Irfanview 3.98Irfanview Irfanview 3.97Irfanview Irfanview 3.75Irfanview Irfanview 3.70Irfanview Irfanview 3.33Irfanview Irfanview 3.30Irfanview Irfanview 3.07Irfanview Irfanview 3.05Irfanview Irfanview 2.90Irfanview Irfanview 2.85Irfanview Irfanview 2.63Irfanview Irfanview 2.62
6.8
CVSSv2
CVE-2012-0897
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns prior to 4.33 allows remote malicious users to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
Irfanview Irfanview 2.32Irfanview Irfanview 2.30Irfanview Irfanview 2.62Irfanview Irfanview 2.60Irfanview Irfanview 2.35Irfanview Irfanview 2.83Irfanview Irfanview 2.66Irfanview Irfanview 2.68Irfanview Irfanview 2.95Irfanview IrfanviewIrfanview Irfanview 2.22Irfanview Irfanview 2.20Irfanview Irfanview 2.50Irfanview Irfanview 2.40Irfanview Irfanview 2.80Irfanview Irfanview 3.99Irfanview Irfanview 3.02Irfanview Irfanview 3.05Irfanview Irfanview 1.90Irfanview Irfanview 1.95Irfanview Irfanview 2.10Irfanview Irfanview 2.12
7.5
CVSSv2
CVE-2013-5351
Heap-based buffer overflow in IrfanView prior to 4.37 allows remote malicious users to execute arbitrary code via the LZW code stream in a GIF file.
Irfanview IrfanviewIrfanview Irfanview 4.25Irfanview Irfanview 4.23Irfanview Irfanview 3.97Irfanview Irfanview 3.95Irfanview Irfanview 3.61Irfanview Irfanview 3.60Irfanview Irfanview 3.25Irfanview Irfanview 3.21Irfanview Irfanview 3.05Irfanview Irfanview 3.02Irfanview Irfanview 2.85Irfanview Irfanview 2.83Irfanview Irfanview 2.62Irfanview Irfanview 2.60Irfanview Irfanview 2.32Irfanview Irfanview 2.30Irfanview Irfanview 2.27Irfanview Irfanview 2.12Irfanview Irfanview 2.10Irfanview Irfanview 1.97Irfanview Irfanview 1.95
9.3
CVSSv2
CVE-2009-0197
Integer overflow in the FORMATS Plugin prior to 4.23 for IrfanView allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow.
Irfanview FormatsIrfanview Formats 4.20Irfanview Formats 4.10Irfanview Formats 4.00
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook