CVE-2010-1509

Related Files

IrfanView PSD Image Parsing Sign-Extension Vulnerability

Posted May 14, 2010

Authored by Stefan Cornelius | Site secunia.com

Secunia Research has discovered a vulnerability in IrfanView, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a sign-extension error when processing certain PSD images, which can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted PSD file. Successful exploitation may allow execution of arbitrary code. Version 4.25 is affected.

tags | advisory, overflow, arbitrary

advisories | CVE-2010-1509

SHA-256 | 0c62dba45771af84679292305942045e3e82e928d385b162cf38c58f700e5354

Download | Favorite | View