CVE-2012-3585

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
irfanviewirfanview_plugins
𝑥
≤ 4.33
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html
http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html
http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html
http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html