Remote Code Execution Vulnerability in IrfanView PlugIns via Crafted JLS File

CVE-2012-3585 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

Learn more about our Web Application Penetration Testing UK.