PT-2023-20882 · Irfan Skiljan · Irfanview
CVE-2023-26974
·
Published
2023-04-04
·
Updated
2023-04-11
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Irfanview version 4.62
Description
The issue allows a user-mode write access violation via a crafted JPEG 2000 file. This can be triggered starting at the JPEG2000+0x0000000000001bf0 location in the file.
Recommendations
For Irfanview version 4.62, consider avoiding the use of crafted JPEG 2000 files until a patch is available. As a temporary workaround, restrict the handling of JPEG 2000 files to minimize the risk of exploitation.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Irfanview