CVE-2012-3585 in IrfanView PlugInsinfo

Summary

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

06/19/2012

Disclosure

07/05/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Interested in the pricing of exploits?

See the underground prices here!