CVE-2012-3585

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

7.74% chance of exploitation in the next 30 days, 94th percentile

Published

2012-07-05

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19483

References

• CVE Record
• NVD entry

Related

• CVE-2012-3579
• CVE-2012-3588
• CVE-2012-3578
• CVE-2012-3716
• CVE-2012-3577
• CVE-2012-3748