FKIE_CVE-2012-5904
Vulnerability from fkie_nvd - Published: 2012-11-17 21:55 - Updated: 2026-04-29 01:13
Severity
Summary
Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6883C635-3987-49FE-92EF-FB082782A363",
"versionEndIncluding": "4.32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.70:*:*:*:*:*:*:*",
"matchCriteriaId": "7B5AC2D0-D6A6-40A3-8271-ACB0A242CBBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.80:*:*:*:*:*:*:*",
"matchCriteriaId": "069EA695-B5C5-4C57-98C8-E03793AC60F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.85:*:*:*:*:*:*:*",
"matchCriteriaId": "A9F96F9E-5CE6-4B50-812C-1BB27F5DB65B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.90:*:*:*:*:*:*:*",
"matchCriteriaId": "778DAC6D-12C1-470A-BBC4-62CAE0F0BA7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.95:*:*:*:*:*:*:*",
"matchCriteriaId": "CA9869CE-BCE4-4915-A4F2-7D429F98F37A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.97:*:*:*:*:*:*:*",
"matchCriteriaId": "F9771B28-A7BC-42B5-BA24-63727CE0EBE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.98:*:*:*:*:*:*:*",
"matchCriteriaId": "51705801-EA1E-4E0E-AF6A-2EBE49556DAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.98a:*:*:*:*:*:*:*",
"matchCriteriaId": "DE0A6535-183B-48D8-BB93-4E4D392D840E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:1.99:*:*:*:*:*:*:*",
"matchCriteriaId": "4BE7AF00-42F3-4483-BC34-B24F1C328F49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.00:*:*:*:*:*:*:*",
"matchCriteriaId": "1DF2CFFB-B79A-4554-A57C-2E675B65D52B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.05:*:*:*:*:*:*:*",
"matchCriteriaId": "05DB3B2A-4FC0-4AA5-AE9A-E8242795E31E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.07:*:*:*:*:*:*:*",
"matchCriteriaId": "C24720C1-DA36-4A95-BC70-2CB98B8D0FBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A18B1613-378A-483B-8BCE-D013CF24F200",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.12:*:*:*:*:*:*:*",
"matchCriteriaId": "28F0AB90-6123-4E1B-BBED-B7BD1478668C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.15:*:*:*:*:*:*:*",
"matchCriteriaId": "5DA19D23-2907-42F2-A1BF-348AF1F8FC3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.17:*:*:*:*:*:*:*",
"matchCriteriaId": "125360D8-8959-46B8-9977-BF1D03BA55CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.18:*:*:*:*:*:*:*",
"matchCriteriaId": "F2C63D78-6152-42CC-BD5B-98AA34727BE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "369C42FA-DF57-4453-A3F8-BC93257D415E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.22:*:*:*:*:*:*:*",
"matchCriteriaId": "59923D0D-E3B4-4C59-B167-D59522C332EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.25:*:*:*:*:*:*:*",
"matchCriteriaId": "070AE76D-E1A6-4532-B67F-EC1AF2E67AC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.27:*:*:*:*:*:*:*",
"matchCriteriaId": "3285C557-FAEB-4604-BF33-E42693B6545D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.30:*:*:*:*:*:*:*",
"matchCriteriaId": "050B6B28-11D9-4D06-B6C3-0A26769B73F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.32:*:*:*:*:*:*:*",
"matchCriteriaId": "82744B9A-2989-45D2-B144-47C78384B556",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.35:*:*:*:*:*:*:*",
"matchCriteriaId": "AE235D0D-52FA-4E58-BD98-75F8452A8F0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.37:*:*:*:*:*:*:*",
"matchCriteriaId": "242E8825-7E8F-4883-BDAA-10B7775CD298",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.40:*:*:*:*:*:*:*",
"matchCriteriaId": "0C28B2DC-0C5A-45C5-A6F6-2E0485C27299",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.50:*:*:*:*:*:*:*",
"matchCriteriaId": "F78602D6-A56B-4EF7-AD89-74DD67C716CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.52:*:*:*:*:*:*:*",
"matchCriteriaId": "D2163005-6B7C-4899-8770-AEB07DB4C522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.55:*:*:*:*:*:*:*",
"matchCriteriaId": "660EEA7C-664C-4BDD-BAE4-03B42FF52F80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.60:*:*:*:*:*:*:*",
"matchCriteriaId": "7FC20487-0A24-4536-A3CE-4A00B2182F18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.63:*:*:*:*:*:*:*",
"matchCriteriaId": "7D08F804-5ED8-49BC-A5F0-50DC873B1A72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.65:*:*:*:*:*:*:*",
"matchCriteriaId": "BEFD6493-AC2A-4628-BC20-D85F42E98A7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.66:*:*:*:*:*:*:*",
"matchCriteriaId": "87E28602-8072-4881-867D-A870E441316D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.68:*:*:*:*:*:*:*",
"matchCriteriaId": "5AB81B36-E878-4A02-BE99-DCF025E20CEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.80:*:*:*:*:*:*:*",
"matchCriteriaId": "F6DE3D7C-DF35-4921-B240-265E7825EA93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.82:*:*:*:*:*:*:*",
"matchCriteriaId": "4FBECB19-B064-4DD1-87F4-A4AF47E4502E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.83:*:*:*:*:*:*:*",
"matchCriteriaId": "AFE0D6AE-6CB5-49C6-8B59-BEA4CDE23292",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.85:*:*:*:*:*:*:*",
"matchCriteriaId": "F3E4C52B-FE56-4422-BEA3-F534AC855CEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.90:*:*:*:*:*:*:*",
"matchCriteriaId": "72BB9CBF-BA33-42F3-875D-CFB527E877AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.92:*:*:*:*:*:*:*",
"matchCriteriaId": "60ADDB85-60FB-4226-A8D3-A78650478FE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.95:*:*:*:*:*:*:*",
"matchCriteriaId": "1A24DB1B-A1CB-4005-BF1B-B81DC83E42CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.97:*:*:*:*:*:*:*",
"matchCriteriaId": "0D5C86C3-D914-4C12-9408-381D9F349AEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:2.98:*:*:*:*:*:*:*",
"matchCriteriaId": "819E7311-7452-484B-8BE0-901C49E043CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.00:*:*:*:*:*:*:*",
"matchCriteriaId": "15187176-FD8E-4147-AE84-8D9A57853A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.02:*:*:*:*:*:*:*",
"matchCriteriaId": "92AA2459-7D9D-41A2-A08A-41AAF892CEF6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.05:*:*:*:*:*:*:*",
"matchCriteriaId": "C4D44A34-BDDC-4AF8-BE32-095EA55F5709",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.07:*:*:*:*:*:*:*",
"matchCriteriaId": "4D74B745-5E26-486F-94CA-3904BDECA7FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.10:*:*:*:*:*:*:*",
"matchCriteriaId": "BE8AFE10-C6EB-4767-B179-DD74449D8F3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.12:*:*:*:*:*:*:*",
"matchCriteriaId": "417E0560-88EC-4AD7-9D66-21B76773C974",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.15:*:*:*:*:*:*:*",
"matchCriteriaId": "7E36728A-5EB8-4C91-8BB0-EAB93C7042D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.17:*:*:*:*:*:*:*",
"matchCriteriaId": "2A02C59C-2ECF-4221-9BA9-C8044380BBE7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.20:*:*:*:*:*:*:*",
"matchCriteriaId": "4A1D6C64-C2D4-481A-A337-FDB0F9F840F1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.21:*:*:*:*:*:*:*",
"matchCriteriaId": "B257EFB2-0694-4704-8BA1-63CCC1530B1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.25:*:*:*:*:*:*:*",
"matchCriteriaId": "0AB01D76-C2CD-48EE-8AD9-A79DAB4CA26E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.30:*:*:*:*:*:*:*",
"matchCriteriaId": "06CEDC86-9B7D-4214-BF99-16E70D414268",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.33:*:*:*:*:*:*:*",
"matchCriteriaId": "3BB76F6F-2473-4E7E-8BA5-06A34CF9F68E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.35:*:*:*:*:*:*:*",
"matchCriteriaId": "8C2A7D99-F807-4655-AAE9-35529632351D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C97A5E6-3982-486C-8B98-1886F19C9EFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.50:*:*:*:*:*:*:*",
"matchCriteriaId": "1A973DBB-7863-4151-831A-32D3FF4582B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.51:*:*:*:*:*:*:*",
"matchCriteriaId": "CC6DC7D1-E198-45AB-9B5A-82E4A5E607AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.60:*:*:*:*:*:*:*",
"matchCriteriaId": "5B577814-CF78-416B-927F-13B75573CD07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.61:*:*:*:*:*:*:*",
"matchCriteriaId": "C33F00BC-A90C-4078-8009-3B76EDE1304A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.70:*:*:*:*:*:*:*",
"matchCriteriaId": "94194E7B-88A1-4902-ABDB-880A33021106",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.75:*:*:*:*:*:*:*",
"matchCriteriaId": "0CDBB8F3-79C0-40B1-931D-6A91F0BE88A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.80:*:*:*:*:*:*:*",
"matchCriteriaId": "FEB6E674-EE17-4589-8C12-B5D184F4F7D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.85:*:*:*:*:*:*:*",
"matchCriteriaId": "9F3F33FB-51AE-4632-9797-623EED02CBB7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.90:*:*:*:*:*:*:*",
"matchCriteriaId": "36DE03F4-B43E-4ABE-9218-86760400FD40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.91:*:*:*:*:*:*:*",
"matchCriteriaId": "302853B4-9FB8-430C-8C69-EFCCDD2C4380",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.92:*:*:*:*:*:*:*",
"matchCriteriaId": "6806E555-A3E5-4B8D-94B4-40BE4A549311",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.95:*:*:*:*:*:*:*",
"matchCriteriaId": "D5A2AF49-C8CE-4CEB-9154-EB47366E71AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.97:*:*:*:*:*:*:*",
"matchCriteriaId": "0D5981E4-CA70-4760-8D58-16BC983E5034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.98:*:*:*:*:*:*:*",
"matchCriteriaId": "DB8391AF-D227-437B-9DF0-E8FF82A625CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:3.99:*:*:*:*:*:*:*",
"matchCriteriaId": "BBB69385-44C6-41FD-924D-F577B862F74D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.00:*:*:*:*:*:*:*",
"matchCriteriaId": "535174D3-2470-4FF3-827B-70737F6872FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.10:*:*:*:*:*:*:*",
"matchCriteriaId": "93312055-0238-4082-A3E0-E2E50491103A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.20:*:*:*:*:*:*:*",
"matchCriteriaId": "E5F225C4-EEFA-4DEE-81AA-BB69172FAE0B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.23:*:*:*:*:*:*:*",
"matchCriteriaId": "FC85E443-08AE-4222-9807-9C2514713C54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.25:*:*:*:*:*:*:*",
"matchCriteriaId": "890A26BB-117B-4F8E-A22A-992EC9FECAFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.27:*:*:*:*:*:*:*",
"matchCriteriaId": "321399A6-2ED0-4F88-B62C-6B0E248F9F58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.28:*:*:*:*:*:*:*",
"matchCriteriaId": "7C6ACEBC-5042-427A-862B-EBC0DCB7056E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:irfanview:irfanview:4.30:*:*:*:*:*:*:*",
"matchCriteriaId": "3D2DBB10-07D4-43CE-80C4-6875C4A120C1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image."
},
{
"lang": "es",
"value": "Una vulnerabilidad de desbordamiento de b\u00fafer basado en memoria din\u00e1mica en IrfanView antes de v4.33 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un archivo de mapa de bits comprimido RLE modificado como si fuera una imagen DIB, RLE o BMP."
}
],
"id": "CVE-2012-5904",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2012-11-17T21:55:05.047",
"references": [
{
"source": "cve@mitre.org",
"url": "http://osvdb.org/80716"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/47333"
},
{
"source": "cve@mitre.org",
"url": "http://www.irfanview.com/history_old.htm"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/52806"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/80716"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/47333"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.irfanview.com/history_old.htm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/52806"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74452"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…