JVN#63194482: IrfanView vulnerable to buffer overflow

IrfanView is an application for viewing images of many different file formats.
IrfanView contains a buffer overflow vulnerability, when using the Thumbnails window with Thumbnail tooltips enabled.

Impact

When processing a specially crafted file contained in a folder named using multi-byte characters, the program will crash and arbitrary code may be executed.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• IrfanView 4.36 and earlier