Secunia: 25% of computers have vulnerable IrfanView installed
Secunia: 25% of computers have vulnerable IrfanView installed
Secunia Research has discovered a vulnerability in IrfanView, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to a boundary error when importing palette (*.pal) files. This can be exploited to cause a stack-based buffer overflow by tricking a user into importing a specially crafted palette (*.pal) file.
Successful exploitation allows execution of arbitrary code.
The vulnerability is confirmed in version 4.00. Other versions may also be affected.
Solution:
Update to version 4.10.
http://www.irfanview.com/main_download_engl.htm
25% of computers have vulnerable IrfanView installed - Blog - Secunia
20% off Spyware Doctor and Registry Mechanic - use coupon code: pctools20. Click Here Now!
$10 off on Spy Sweeper. And shop safe this holiday season. Click Here Now!
15% on Norton AntiVirus 2008 - coupon code: 10NAV08. Click Here Now!
Back to: PC Security, privacy news
More News, Articles from elsewhere
All trademarks, product names and company names or logos cited herein are the property of their respective owners. News content is the property of their respective authors/owners/publishers.
Malware Help. Org does not represent, warrant, or endorse the accuracy, reliability, completeness or timeliness of any of the information, content, views, opinions, recommendations or advertisements contained on, distributed through, or linked, downloaded or accessed from any of the information contained in this News Story.
By reading this you understand and agree that everything that is written in this article is for educational use only, and none of it should be used at any circumstances, and if you choose to use this information for any kind of action you take full responsibility for it and release Malware Help. Org (c) of any responsibility. If you do not agree to whats written here, LEAVE NOW!
Webmasters! Don't want your site's news/articles appear here, No problem, please drop me a line, Malware Help. Org will be happy to comply with your wishes.



