CVE-2009-2118

Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted…

published June 18, 2009

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02512 · 84.7th percentile
Published
2009-06-18T21:00Z
EPSS history
Timeline
  • 18 JUN 21:00Z
    Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted…
    cvelistv5