CVE-2012-0025 Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of...
MediumCVSS 6.8
EPSS 6.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service (crash) via a crafted FPX image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| irfanview flashpix plugin | = 4.2.2.0 | No fix listed |
References
- 47246 third-party-advisory vendor-advisory
- 47322 third-party-advisory vendor-advisory
- 18256 exploit
- www.imagemagick.org
- [oss-security] 20120103 Re: CVE request: libfpx "Free_All_Memory()" Double-Free Vulnerability mailing-list
- [oss-security] 20121102 Re: libfpx Duplicate CVEs (CVE-2011-5232 and CVE-2012-0025) mailing-list
- 77958 vdb-entry
- www.protekresearchlab.com exploit
- libfpx-freeallmemory-code-exec(71892) vdb-entry
- GLSA-201605-03 vendor-advisory