Description
Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PSD image with RLE compression.
References
- 40105 vdb-entry
- 39036 third-party-advisory
- 64628 vdb-entry
- irfanview-rle-psd-bo(58549) vdb-entry
- 20100512 Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow mailing-list
- http://secunia.com/secunia_research/2010-42
- oval:org.mitre.oval:def:7397 vdb-entry signature
- http://irfanview.com/main_history.htm