Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IrfanView FlashPix PlugIn堆缓冲器溢出漏洞
Vulnerability Description
IrfanView是波黑软件开发者Irfan Skiljan所研发的一款图片浏览器，它支持图片浏览、图片编辑、图片格式转换等。 IrfanView的FlashPix PlugIn中存在漏洞，该漏洞源于当解压FlashPix图片时的不充分验证。攻击者可利用该漏洞操控用户系统，借助特制FPX文件导致基于堆的缓冲区溢出。成功利用该漏洞可能允许执行任意代码。FlashPix PlugIn 4.3.2.0版本中存在该漏洞，其它版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A