CVE-2012-0025

FlashPix PlugIn 4.2.2.0 for IrfanView - Denial of Service via Crafted FPX Image

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-0025. PoCs published by Francis Provencher.

AI-analyzed exploit summary The document describes a double-free vulnerability in IrfanView's FlashPix PlugIn, which can lead to remote code execution via a crafted FPX image. The vulnerability is due to the 'Free_All_Memory()' function not properly setting decoder elements to NULL after freeing them.

Description

Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service (crash) via a crafted FPX image.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Francis Provencher · textdoswindows
https://www.exploit-db.com/exploits/18256

The document describes a double-free vulnerability in IrfanView's FlashPix PlugIn, which can lead to remote code execution via a crafted FPX image. The vulnerability is due to the 'Free_All_Memory()' function not properly setting decoder elements to NULL after freeing them.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: IrfanView (FlashPix PlugIn)
No auth needed
Prerequisites: Crafted FPX image file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201605-03
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47322
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/77958
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/01/03/16
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47246
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18256
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71892
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/11/02/6

Scores

EPSS 0.0636
EPSS Percentile 92.8%

Details

CWE
CWE-399
Status published
Products (1)
irfanview/flashpix_plugin 4.2.2.0
Published Nov 02, 2012
Tracked Since Feb 18, 2026