IrfanView.FlashPix.Plugin.Buffer.Overflow

Description

This indicates an attempt to exploit a buffer overflow vulnerability in the IrfanView FlashPix Plug-In.
The FlashPix plugin for IrfanView has a vulnerability which allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, resulting in a heap based buffer overflow.

Affected Products

IrfanView FlashPix Plug-In v3.9.8.0 or prior.

Impact

System Compromise: remote attackers can gain control of vulnerable systems.

Recommended Actions

Do not open untrusted fpx files.

References