IrfanView Formats PlugIn Multiple Buffer Overflow Vulnerability

Multiple vulnerabilities have been identified in IrfanView Formats PlugIn, which can be exploited by malicious people to compromise a user's system.

1. Due to an error within the ECW plugin (NCSEcw.dll) when decompressing images and can be exploited to cause a heap-based buffer overflow via a specially crafted file.
2. Due to a boundary error when processing TTF font names and can be exploited to cause a stack-based buffer overflow via a specially crafted font file.

Successful exploitation may allow execution of arbitrary code, but requires tricking a user into opening a malicious file.