CVE-2012-0278
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression.
- Score
- CVSS 2.0 9.3 Critical
- Status
- Modified - PSIRT-CNA@flexerasoftware.com
- Published
- 2012-04-18
- Last modified
- 2024-08-06
- Weaknesses
- CWE-119
Affected products
References
- http://secunia.com/advisories/48772
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=41&Itemid=41
- http://www.securityfocus.com/bid/53009
