CVE-2010-1509

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial…

published May 14, 2010

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03660 · 89.6th percentile
Published
2010-05-14T19:24Z
EPSS history
Timeline
  • 14 MAY 19:24Z
    IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial…
    cvelistv5