Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptions_W+0x0000000000032850".
References
Link | Resource |
---|---|
https://github.com/KamasuOri/publicResearch/tree/master/poc/irfanview/3 | Third Party Advisory |
Configurations
Information
Published : 2021-11-05 10:15
Updated : 2021-11-08 13:36
NVD link : CVE-2020-23565
Mitre link : CVE-2020-23565
JSON object : View
CWE
Products Affected
irfanview
- irfanview