CVE-2011-5233
published 2012-10-25CVE-2011-5233: Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel"…
PriorityP337medium4.3CVSS 2.0
AVNACMAuNCNINAP
EXPLOIT
EPSS
9.32%
94.8th percentile
Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pixel" values in a TIFF image file.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| irfanview | irfanview | <= 4.30 | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
| irfanview | irfanview | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/47065http://www.exploit-db.com/exploits/18257http://www.irfanview.com/history_old.htmhttp://www.osvdb.org/77957http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=30&Itemid=30https://exchange.xforce.ibmcloud.com/vulnerabilities/71891http://secunia.com/advisories/47065http://www.exploit-db.com/exploits/18257http://www.irfanview.com/history_old.htmhttp://www.osvdb.org/77957http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=30&Itemid=30https://exchange.xforce.ibmcloud.com/vulnerabilities/71891
2012-10-25
Published