IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error."
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-05-14 12:30
Updated : 2018-10-10 12:57
NVD link : CVE-2010-1509
Mitre link : CVE-2010-1509
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
irfanview
- irfanview