CVE-2012-0897

EPSS 52.7%

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/19519unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/78333 http://secunia.com/advisories/47360 https://exchange.xforce.ibmcloud.com/vulnerabilities/72398 http://www.irfanview.com/history_old.htm http://www.securityfocus.com/bid/51426 http://www.securitytracker.com/id/1032529 http://www.securitytracker.com/id/1032530