CVE

Id
37632  
CVE No.
CVE-2009-0197  
Status
Candidate  
Description
Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow.  
Phase
Assigned (20090120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
408657 37632 CVE-2009-0197 BUGTRAQ:20090407 Secunia Research: IrfanView Formats Plug-in XPM Parsing Integer Overflow  View
408658 37632 CVE-2009-0197 URL:http://www.securityfocus.com/archive/1/archive/1/502516/100/0/threaded  View
408659 37632 CVE-2009-0197 MISC:http://secunia.com/secunia_research/2009-20/  View
408660 37632 CVE-2009-0197 CONFIRM:http://www.irfanview.com/plugins.htm  View
408661 37632 CVE-2009-0197 BID:34402  View
408662 37632 CVE-2009-0197 URL:http://www.securityfocus.com/bid/34402  View
408663 37632 CVE-2009-0197 OSVDB:53323  View
408664 37632 CVE-2009-0197 URL:http://www.osvdb.org/53323  View
408665 37632 CVE-2009-0197 SECUNIA:34525  View
408666 37632 CVE-2009-0197 URL:http://secunia.com/advisories/34525  View
408667 37632 CVE-2009-0197 VUPEN:ADV-2009-0953  View
408668 37632 CVE-2009-0197 URL:http://www.vupen.com/english/advisories/2009/0953  View
408669 37632 CVE-2009-0197 XF:irfanview-formatsplugin-xpm-bo(49717)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41079 JVNDB-2009-002086 OpenOffice.org におけるバッファオーバーフローの脆弱性 OpenOffice.org には、Word ドキュメント内のレコードの処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0201 37632 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002086.html  View