Record summary

CVE-2012-3585 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.

Description

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBIrfanView JLS Formats PlugIn - Heap OverflowExploitDB exploitby Joseph SheridanNot analyzed1 file
ExploitDB

PoC details

References

3