IrfanView < 4.33 Boundary Error Multiple Image File Handling Remote Overflow
High Nessus Plugin ID 58579
SynopsisA graphic viewer on the remote host is affected by a buffer overflow vulnerability.
DescriptionThe remote Windows host contains a version of IrfanView earlier than 4.33. As such, it is reportedly affected by a heap-based buffer overflow vulnerability due to the way the application handles RLE compressed bitmap files.
An attacker could trick a user into opening specially crafted DIB, RLE, or BMP image files using RLE compression, which would result in arbitrary code execution on the affected host subject to the privileges of the user running this application.
SolutionUpgrade to IrfanView version 4.33 or later.