CVE-2017-2813: Integer Overflow

Published Jun 21, 2017

Updated

An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView.

Affected Software

1 affected component

IrfanView IrfanView=4.44

Event History

Jun 21, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-2813?

CVE-2017-2813 is classified as a critical vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2017-2813?

To mitigate CVE-2017-2813, update IrfanView to version 4.44 or a later version that addresses this vulnerability.

What type of vulnerability is CVE-2017-2813?

CVE-2017-2813 is an integer overflow vulnerability affecting the JPEG 2000 parser in IrfanView.

What can happen if CVE-2017-2813 is exploited?

Exploitation of CVE-2017-2813 can lead to arbitrary code execution on the affected system.

What are the affected versions of IrfanView for CVE-2017-2813?

CVE-2017-2813 specifically affects IrfanView version 4.44.