Medium · 5.5 CVE-2023-26974 EUVD-2023-30764GHSA-6c6j-xcgv-52vx

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.

Published Apr 4, 2023 · Updated Feb 13, 2025 · Assigned by mitre

Description

Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.

Advisories 1

WID-SEC-2023-0852 Irfan Skiljan IrfanView: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Apr 4, 2023

References

https://github.com/overXsky/IrfanviewPoc