Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.
https://exchange.xforce.ibmcloud.com/vulnerabilities/74452
https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-5778
http://www.securityfocus.com/bid/52806
http://www.irfanview.com/history_old.htm