CVE-2009-0197
EUVD-2009-020609.04.2009, 15:08
Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| irfanview | formats | 𝑥 ≤ 4.22 |
| irfanview | formats | 4.00 |
| irfanview | formats | 4.10 |
| irfanview | formats | 4.20 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References