Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file.
Date: 2007-04
Affected: irfanview/irfanview
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2007-1867
CVSS: 10 ()

Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI) file.


Mitigations:

Architectural layers (MAESTRO):