HTTP: Irfanview JPEG2000 JP2 Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Irfanview while parsing a specially crafted JP2 file. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

IrfanView JPEG-2000 Plugin is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions. IrfanView JPEG-2000 Plugin 4.32 is vulnerable; other versions may also be affected.

Affected Products

Irfanview jpeg2000

References

BugTraq: 51426

CVE: CVE-2012-0897

Short Name

HTTP:MISC:IRFVIEW-JP2-BO

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Irfanview JPEG2000 JP2 Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?