irfanview Vulnerability Advisory Catalog

Total 290 security vulnerabilities recorded for irfanview software and firmware.

← Back to All Vendors
Component: irfanview

IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod...

📅 2017-07-05
CVSS 7.8 Dossier →
Component: irfanview

IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod...

📅 2017-07-05
CVSS 7.8 Dossier →
Component: irfanview

IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod...

📅 2017-07-05
CVSS 7.8 Dossier →
Component: irfanview

An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can c...

📅 2017-06-21
CVSS 8.8 Dossier →
Component: irfanview

IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file....

📅 2017-04-30
CVSS 7.8 Dossier →
CVE-2013-5351 UNKNOWN
Component: irfanview

Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file....

📅 2014-02-14
CVSS 7.5 Dossier →
CVE-2013-6932 UNKNOWN
Component: irfanview

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrar...

📅 2013-12-28
CVSS 7.6 Dossier →
CVE-2012-5904 UNKNOWN
Component: irfanview

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as...

📅 2012-11-17
CVSS 6.8 Dossier →
CVE-2012-0025 UNKNOWN
Component: flashpix_plugin

Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for Irfan...

📅 2012-11-02
CVSS 6.8 Dossier →
CVE-2011-5233 UNKNOWN
Component: irfanview

Heap-based buffer overflow in IrfanView before 4.32 allows remote attackers to execute arbitrary code via crafted "Rows Per Strip" and "Samples Per Pi...

📅 2012-10-25
CVSS 4.3 Dossier →
CVE-2012-3585 UNKNOWN
Component: irfanview_plugins

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attack...

📅 2012-07-05
CVSS 9.3 Dossier →
CVE-2012-0278 UNKNOWN
Component: flashpix_plugin

Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file ...

📅 2012-04-18
CVSS 9.3 Dossier →
CVE-2012-0897 UNKNOWN
Component: irfanview

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (...

📅 2012-01-20
CVSS 6.8 Dossier →
CVE-2010-1510 UNKNOWN
Component: irfanview

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly execute arbit...

📅 2010-05-14
CVSS 5.0 Dossier →
CVE-2010-1509 UNKNOWN
Component: irfanview

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause...

📅 2010-05-14
CVSS 5.0 Dossier →
CVE-2009-2118 UNKNOWN
Component: irfanview

Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a c...

📅 2009-06-18
CVSS 6.8 Dossier →
CVE-2009-0197 UNKNOWN
Component: formats

Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (appli...

📅 2009-04-09
CVSS 9.3 Dossier →
CVE-2008-0493 UNKNOWN
Component: irfanview

fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which ...

📅 2008-01-30
CVSS 9.3 Dossier →
CVE-2007-4343 UNKNOWN
Component: irfanview

Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) fi...

📅 2007-10-16
CVSS 5.1 Dossier →
CVE-2007-2363 UNKNOWN
Component: irfanview

Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted .IFF file....

📅 2007-04-30
CVSS 8.5 Dossier →
CVE-2007-1948 UNKNOWN
Component: irfanview

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoff...

📅 2007-04-11
CVSS 9.3 Dossier →
CVE-2007-1867 UNKNOWN
Component: irfanview

Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file....

📅 2007-04-04
CVSS 10.0 Dossier →
CVE-2007-1245 UNKNOWN
Component: irfanview

IrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a malformed WMF file....

📅 2007-03-03
CVSS 4.3 Dossier →
CVE-2006-4374 UNKNOWN
Component: irfanview

IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a crafted ANI image file, possibly d...

📅 2006-08-26
CVSS 2.6 Dossier →
Page 12 of 13 (290 Total Records)