Test ID:	1.3.6.1.4.1.25623.1.0.802576
Category:	Buffer overflow
Title:	IrfanView JPEG-2000 Plugin Remote Stack Based Buffer Overflow Vulnerability
Summary:	IrfanView with JPEG-2000 plugin is prone to a stack-based buffer overflow vulnerability.
Description:	Summary: IrfanView with JPEG-2000 plugin is prone to a stack-based buffer overflow vulnerability. Vulnerability Insight: The flaw is due to an error in the JPEG2000 plug-in when processing the Quantization Default (QCD) marker segment. This can be exploited to cause a stack-based buffer overflow via a specially crafted JPEG2000 (JP2) file. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code. Affected Software/OS: IrfanView JPEG-2000 Plugin version prior to 4.33 Solution: Upgrade IrfanView JPEG-2000 Plugin version to 4.33 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0897 BugTraq ID: 51426 http://www.securityfocus.com/bid/51426 http://osvdb.org/78333 http://www.securitytracker.com/id/1032529 http://www.securitytracker.com/id/1032530 http://secunia.com/advisories/47360 XForce ISS Database: irfanview-qcd-bo(72398) https://exchange.xforce.ibmcloud.com/vulnerabilities/72398
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.