IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
BID:35423
Info
IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
| Bugtraq ID: | 35423 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2009 12:00AM |
| Updated: | Jun 22 2009 04:59PM |
| Credit: | Tielei Wang |
| Vulnerable: |
IrfanView IrfanView 4.23 |
| Not Vulnerable: |
IrfanView IrfanView 4.25 |
Discussion
IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
IrfanView is prone to a remote integer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts likely cause denial-of-service conditions.
Versions prior to IrfanView 4.25 are vulnerable.
IrfanView is prone to a remote integer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary machine code in the context of the vulnerable application. Failed exploit attempts likely cause denial-of-service conditions.
Versions prior to IrfanView 4.25 are vulnerable.
Exploit / POC
IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
Solution:
Vendor updates are available. Please see the references for details.
Solution:
Vendor updates are available. Please see the references for details.
References
IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
References:
References:
- History of changes (irfan skiljan)
- IrfanView Homepage (irfan skiljan)