CVE-2012-3585

 

Published at: - 06-07-2012 12:55

Last modified: - 06-10-2022 06:39

Total changes: - 2

Description

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• http://www.reactionpenetrationtesting.co.uk/Irfanview-JLS-Heap-Overflow.html
• 20120629 Irfanview Plugins JLS Decompression-

 

Keywords

NVD

 

CVE-2012-3585

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures