Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IrfanView Formats PlugIn ‘jpeg_ls.dll’缓冲区溢出漏洞
Vulnerability Description
IrfanView是波黑软件开发者Irfan Skiljan所研发的一款图片浏览器，它支持图片浏览、图片编辑、图片格式转换等。 IrfanView PlugIns 4.34之前版本的Formats插件(jpeg_ls.dll)库中存在远程基于堆的缓冲区溢出漏洞，该漏洞源于对用户提供的输入在复制到大小不足的内存缓冲区之前未经正确的边界值校验。远程攻击者可利用该漏洞在受影响应用程序上下文中执行任意代码，攻击失败可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A