Description
Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow.
References
- 35359 third-party-advisory
- 55150 vdb-entry
- http://www.irfanview.com/main_history.htm
- 35423 vdb-entry