CVE-2012-0897
IrfanView < 4.33 - Remote Code Execution via JPEG2000 QCD Marker Segment
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-0897.
PoCs published by Metasploit, including Metasploit module exploits/windows/fileformat/irfanview_jpeg2000_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in IrfanView's JPEG2000.dll plugin (CVE-2012-0897) by crafting a malicious JP2 file with a malformed qcd chunk. It uses an egghunter for stability and achieves remote code execution on vulnerable systems.
Description
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in IrfanView's JPEG2000.dll plugin (CVE-2012-0897) by crafting a malicious JP2 file with a malformed qcd chunk. It uses an egghunter for stability and achieves remote code execution on vulnerable systems.
This Metasploit module exploits a stack-based buffer overflow in IrfanView's JPEG2000 plugin (CVE-2012-0897) via a malformed qcd chunk in a JP2 file. It uses an egghunter for stability and achieves remote code execution on vulnerable systems.