IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow, related to a "sign-extension error."
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: flexera

Published: 2010-05-14T19:24:00

Updated: 2024-08-07T01:28:41.302Z

Reserved: 2010-04-26T00:00:00

Link: CVE-2010-1509

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-05-14T19:30:01.327

Modified: 2024-11-21T01:14:35.830

Link: CVE-2010-1509

cve-icon Redhat

No data.