Lucene search
HistoryApr 18, 2012 - 10:33 a.m.
CVE-2012-0278
cve-2012-0278
flashpix
buffer overflow
remote code execution
security vulnerability
irfanview
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
Low
0.221 Low
EPSS
Percentile
96.5%
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a .fpx file containing a crafted FlashPix image that is not properly handled during decompression.
Affected configurations
Node
irfanviewflashpix_pluginRange≤4.33
ORirfanviewflashpix_pluginMatch4.32
irfanviewirfanview
Related
nessus
nessus
IrfanView FlashPix Plugin Heap Based Buffer Overflow
2012-07-05 00:00:00
nvd
nvd
CVE-2012-0278
2012-04-18 10:33:32
cvelist
cvelist
CVE-2012-0278
2012-04-18 10:00:00
prion
prion
Heap overflow
2012-04-18 10:33:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
Low
0.221 Low
EPSS
Percentile
96.5%
Related for CVE-2012-0278