← back
CVE-2012-0025

CVE-2012-0025

EPSS 6.4%
Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service (crash) via a crafted FPX image.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/18256unverifiedexploitdbwww.exploit-db.com/exploits/18256unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/47246http://secunia.com/advisories/47322https://exchange.xforce.ibmcloud.com/vulnerabilities/71892https://security.gentoo.org/glsa/201605-03http://www.exploit-db.com/exploits/18256http://www.imagemagick.org/download/delegates/libfpx-1.3.1-1.ziphttp://www.openwall.com/lists/oss-security/2012/01/03/16http://www.openwall.com/lists/oss-security/2012/11/02/6http://www.osvdb.org/77958http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=31&Itemid=31