Vulnerability Description
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Irfanview | Irfanview Plugins | <= 4.33 |
| Irfanview | Irfanview | All versions |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html
- http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html
- http://archives.neohapsis.com/archives/bugtraq/2012-06/0191.html
- http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html
FAQ
What is CVE-2012-3585?
CVE-2012-3585 is a vulnerability with a CVSS score of 9.3 (HIGH). Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS fi...
How severe is CVE-2012-3585?
CVE-2012-3585 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-3585?
Check the references section above for vendor advisories and patch information. Affected products include: Irfanview Irfanview Plugins, Irfanview Irfanview.