Signature Detail

HTTP: Irfanview JPEG2000 JP2 Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Irfanview while parsing a specially crafted JP2 file. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

IrfanView JPEG-2000 Plugin is prone to a remote stack-based buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions. IrfanView JPEG-2000 Plugin 4.32 is vulnerable; other versions may also be affected.

Affected Products

• IrfanView JPEG2000
• IrfanView JPEG-2000 Plugin 4.32

References

• BugTraq: 51426
• CVE: CVE-2012-0897