Heap-based buffer overflow in IrfanView - CVE-2011-5233

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Heap-based buffer overflow in IrfanView before 4.32. A remote attacker can use crafted to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2011-5233

Links to Public Exploits and PoC-codes

• Exploit #4468 - IrfanView - '.tiff' Image Processing Buffer Overflow (August 11, 2020)

External References

• http://secunia.com/advisories/47065
• http://www.exploit-db.com/exploits/18257
• http://www.irfanview.com/history_old.htm
• http://www.osvdb.org/77957
• http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=30&Itemid=30
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71891

Related Security Bulletins

• Heap-based buffer overflow in IrfanView