CVEvulnerability

CVE-2010-1509

5.0 MEDIUM Published 2010-05-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-05-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error."

Affected configurations

• irfanview irfanview (<= 4.25) • irfanview irfanview 1.70 • irfanview irfanview 1.75 • irfanview irfanview 1.80 • irfanview irfanview 1.85 • irfanview irfanview 1.90 • irfanview irfanview 1.95 • irfanview irfanview 1.97 • irfanview irfanview 1.98 • irfanview irfanview 1.98a • irfanview irfanview 1.99 • irfanview irfanview 2.00 • irfanview irfanview 2.05 • irfanview irfanview 2.07 • irfanview irfanview 2.10 • irfanview irfanview 2.12 • irfanview irfanview 2.15 • irfanview irfanview 2.17 • irfanview irfanview 2.18 • irfanview irfanview 2.20 • irfanview irfanview 2.22 • irfanview irfanview 2.25 • irfanview irfanview 2.27 • irfanview irfanview 2.30 • irfanview irfanview 2.32 • irfanview irfanview 2.35 • irfanview irfanview 2.37 • irfanview irfanview 2.40 • irfanview irfanview 2.50 • irfanview irfanview 2.52 • irfanview irfanview 2.55 • irfanview irfanview 2.60 • irfanview irfanview 2.62 • irfanview irfanview 2.63 • irfanview irfanview 2.65 • irfanview irfanview 2.66 • irfanview irfanview 2.68 • irfanview irfanview 2.80 • irfanview irfanview 2.82 • irfanview irfanview 2.83 • irfanview irfanview 2.85 • irfanview irfanview 2.90 • irfanview irfanview 2.92 • irfanview irfanview 2.95 • irfanview irfanview 2.97 • irfanview irfanview 2.98 • irfanview irfanview 3.00 • irfanview irfanview 3.02 • irfanview irfanview 3.05 • irfanview irfanview 3.07 • irfanview irfanview 3.10 • irfanview irfanview 3.12 • irfanview irfanview 3.15 • irfanview irfanview 3.17 • irfanview irfanview 3.20 • irfanview irfanview 3.21 • irfanview irfanview 3.25 • irfanview irfanview 3.30 • irfanview irfanview 3.33 • irfanview irfanview 3.35 … and 21 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References