IrfanView GIF Image Processing Buffer Overflow Vulnerability

Last Update Date: 18 Dec 2013 12:03 Release Date: 18 Dec 2013 4102 Views

RISK: Medium Risk

TYPE: Clients - Graphics & Design

A vulnerability has been identified in IrfanView, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when handling the LZW code stream within GIF files and can be exploited to cause a heap-based buffer overflow via a specially crafted GIF file.

Successful exploitation allows execution of arbitrary code.

Impact

Remote Code Execution

System / Technologies affected

Version 4.36

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 4.37

Vulnerability Identifier

CVE-2013-5351

Source

Secunia
IrfanView