Browse CVEs

HIGH 7.6 CVE-2013-6932EPSS 6% Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitra… Irfanview after 4.36 Fix from $1,9502013-12-28 MEDIUM 6.8 CVE-2012-5904EPSS 6% Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such a… Irfanview after 4.32 Fix from $1,6002012-11-17 MEDIUM 6.8 CVE-2012-0025EPSS 6% Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for Irfa… Flashpix Plugin No fix yet Fix from $1,6002012-11-02 HIGH 9.3 CVE-2012-3585EPSS 8% Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attac… Irfanview Plugins after 4.33 Fix from $1,9502012-07-05 HIGH 9.3 CVE-2012-0278EPSS 10% Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file… Flashpix Plugin after 4.33 Fix from $1,9502012-04-18 MEDIUM 6.8 CVE-2012-0897EPSS 53% Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 … Irfanview after 4.32 Fix from $1,6002012-01-20 MEDIUM 5.0 CVE-2010-1509 IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to caus… Irfanview after 4.25 Fix from $1,6002010-05-14 MEDIUM 5.0 CVE-2010-1510 Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbi… Irfanview after 4.25 Fix from $1,6002010-05-14 MEDIUM 6.8 CVE-2009-2118 Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a … Irfanview Patch available Fix from $1,6002009-06-18 HIGH 9.3 CVE-2009-0197 Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (appl… Formats after 4.22 Fix from $1,9502009-04-09 HIGH 9.3 CVE-2008-0493EPSS 9% fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which… Irfanview No fix yet Fix from $1,9502008-01-30 MEDIUM 5.1 CVE-2007-4343 Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) f… Irfanview Patch available Fix from $1,6002007-10-16 HIGH 8.5 CVE-2007-2363EPSS 9% Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted .IFF file. Irfanview after 4.00 Fix from $1,9502007-04-30 HIGH 9.3 CVE-2007-1948EPSS 8% Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xof… Irfanview No fix yet Fix from $1,9502007-04-11 HIGH 10.0 CVE-2007-1867EPSS 8% Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file. Irfanview No fix yet Fix from $1,9502007-04-04 HIGH 7.5 CVE-1999-1112 Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Pho… Irfanview after 3.0.7 Fix from $1,9501999-11-09