← Back

Irfanview

irfanview

290 CVEs • 13 products

Products (13)

Click to collapse
Toggle
Irfanview
irfanview
271 CVEs
Fpx
fpx
32 CVEs
Pdf
pdf
25 CVEs
Babacad4image
babacad4image
16 CVEs
Cadimage
cadimage
15 CVEs
Tools
tools
10 CVEs
Formats
formats
5 CVEs
Flashpix Plugin
flashpix_plugin
3 CVEs
B3d
b3d
3 CVEs
Exr
exr
3 CVEs
Wpg
wpg
2 CVEs
Wsq
wsq
2 CVEs
Irfanview Plugins
irfanview_plugins
1 CVE

CVEs (290)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0197
1Irfanview
1Formats
Apr 23, 2026
Apr 9, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer o...Show more
Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow.Show less
CVE-2008-0493
1Irfanview
1Irfanview
Apr 23, 2026
Jan 30, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which triggers heap corruption. NOTE: some of these details are obtained fr...Show more
fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute arbitrary code via a crafted FlashPix (.FPX) file, which triggers heap corruption. NOTE: some of these details are obtained from third party information.Show less
CVE-2007-4343
1Irfanview
1Irfanview
Apr 23, 2026
Oct 16, 2007
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (.pal) file.
CVE-2007-2363
1Irfanview
1Irfanview
Apr 23, 2026
Apr 30, 2007
N/A· v4
N/A· v3
8.5 HIGH· v2
Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted .IFF file.
CVE-2007-1948
1Irfanview
1Irfanview
Apr 23, 2026
Apr 11, 2007
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-RLE encoded blocks in...Show more
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp.Show less
CVE-2007-1867
1Irfanview
1Irfanview
Apr 23, 2026
Apr 4, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file.
CVE-2007-1245
1Irfanview
1Irfanview
Apr 23, 2026
Mar 3, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
IrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a malformed WMF file.
CVE-2006-4374
1Irfanview
1Irfanview
Apr 16, 2026
Aug 26, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a crafted ANI image file, possibly due to a buffer overflow.
CVE-2006-4231
1Irfanview
1Irfanview
Apr 16, 2026
Aug 18, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file.
CVE-1999-1112
1Irfanview
1Irfanview
Apr 16, 2026
Nov 9, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.