Evil-DB LogoEvil-DB
← All CVEs

CVE-2012-0897

medium · 6.8

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.

6.8
CVSS
52.2%
EPSS (exploit prob.)
99th
EPSS percentile
2012-01-20
Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
irfanviewirfanview<= 4.32
irfanviewirfanview1.70
irfanviewirfanview1.75
irfanviewirfanview1.80
irfanviewirfanview1.85
irfanviewirfanview1.90
irfanviewirfanview1.95
irfanviewirfanview1.97
irfanviewirfanview1.98
irfanviewirfanview1.98a
irfanviewirfanview1.99
irfanviewirfanview2.00
irfanviewirfanview2.05
irfanviewirfanview2.07
irfanviewirfanview2.10
irfanviewirfanview2.12
irfanviewirfanview2.15
irfanviewirfanview2.17
irfanviewirfanview2.18
irfanviewirfanview2.20
irfanviewirfanview2.22
irfanviewirfanview2.25
irfanviewirfanview2.27
irfanviewirfanview2.30
irfanviewirfanview2.32
irfanviewirfanview2.35
irfanviewirfanview2.37
irfanviewirfanview2.40
irfanviewirfanview2.50
irfanviewirfanview2.52
irfanviewirfanview2.55
irfanviewirfanview2.60
irfanviewirfanview2.62
irfanviewirfanview2.63
irfanviewirfanview2.65
irfanviewirfanview2.66
irfanviewirfanview2.68
irfanviewirfanview2.80
irfanviewirfanview2.82
irfanviewirfanview2.83

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-0897