CVE-2020-23567

Published: Nov 5, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea"

Affected (1)

Products: Irfanview: Irfanview

Irfanview

1 product

Irfanview

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Irfanview Irfanview	Version 4.53

Related CWEs

CWE-369

Divide By Zero

The product divides a value by zero.

References (2)

https://github.com/KamasuOri/publicResearch/tree/master/poc/irfanview/2

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/KamasuOri/publicResearch/tree/master/poc/irfanview/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.