CVE-1999-1112

IrfanView32 <3.07 - RCE

Title source: llm

Description

Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.

Exploits (1)

exploitdb WORKING POC VERIFIED

by UNYUN · clocalwindows

https://www.exploit-db.com/exploits/19610

View Code ZIP pw:eip

References (4)

[Exploit, Vendor Advisory] http://www.securityfocus.com/archive/1/34066

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/3549

[Vendor Advisory] http://stud4.tuwien.ac.at/~e9227474/main2.html

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/781

Scores

EPSS 0.0599

EPSS Percentile 90.7%

Details

Status published

Products (1)

irfanview/irfanview < 3.0.7

Published Nov 09, 1999

Tracked Since Feb 18, 2026