CVE-2007-1948 Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-R...
HighCVSS 9.3
EPSS 8.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| irfanview | = 3.99 | No fix listed |
References
- ifsec.blogspot.com exploit vendor-advisory
- 41554 vdb-entry
- 2558 third-party-advisory
- 20070404 Several Windows image viewers vulnerabilities mailing-list
- ADV-2007-1284 vdb-entry