CVEvulnerability

CVE-2012-5904

6.8 MEDIUM Published 2012-11-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.

Affected configurations

• irfanview irfanview (<= 4.32) • irfanview irfanview 1.70 • irfanview irfanview 1.80 • irfanview irfanview 1.85 • irfanview irfanview 1.90 • irfanview irfanview 1.95 • irfanview irfanview 1.97 • irfanview irfanview 1.98 • irfanview irfanview 1.98a • irfanview irfanview 1.99 • irfanview irfanview 2.00 • irfanview irfanview 2.05 • irfanview irfanview 2.07 • irfanview irfanview 2.10 • irfanview irfanview 2.12 • irfanview irfanview 2.15 • irfanview irfanview 2.17 • irfanview irfanview 2.18 • irfanview irfanview 2.20 • irfanview irfanview 2.22 • irfanview irfanview 2.25 • irfanview irfanview 2.27 • irfanview irfanview 2.30 • irfanview irfanview 2.32 • irfanview irfanview 2.35 • irfanview irfanview 2.37 • irfanview irfanview 2.40 • irfanview irfanview 2.50 • irfanview irfanview 2.52 • irfanview irfanview 2.55 • irfanview irfanview 2.60 • irfanview irfanview 2.63 • irfanview irfanview 2.65 • irfanview irfanview 2.66 • irfanview irfanview 2.68 • irfanview irfanview 2.80 • irfanview irfanview 2.82 • irfanview irfanview 2.83 • irfanview irfanview 2.85 • irfanview irfanview 2.90 • irfanview irfanview 2.92 • irfanview irfanview 2.95 • irfanview irfanview 2.97 • irfanview irfanview 2.98 • irfanview irfanview 3.00 • irfanview irfanview 3.02 • irfanview irfanview 3.05 • irfanview irfanview 3.07 • irfanview irfanview 3.10 • irfanview irfanview 3.12 • irfanview irfanview 3.15 • irfanview irfanview 3.17 • irfanview irfanview 3.20 • irfanview irfanview 3.21 • irfanview irfanview 3.25 • irfanview irfanview 3.30 • irfanview irfanview 3.33 • irfanview irfanview 3.35 • irfanview irfanview 3.36 • irfanview irfanview 3.50 … and 22 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References