CVE-2009-5022 in IrfanView

Résumé (Anglaise)

Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Divulgation

03/05/2011

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
7205	Irfan Skiljan IrfanView PIC File Image Width Value Formats.dll buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2009-5022
7203	Irfan Skiljan IrfanView tif_ojpeg.c buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2009-5022
7198	Irfan Skiljan IrfanView IMXCF.dll buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2009-5022

Sources

• MITRE
• NVD
• CVE Details