rapid7/metasploit-framework — pull request #543 by mrmee (2012-06-29 06:26:22+00:00)
Title: exploit for CVE-2012-0897 irfanview .jp2 processing stack overflow exploit

This was a fun bug to write up ;)

Version <= 4.3.2 of the plugins are vulnerable (you can download it here) http://irfanview.tuwien.ac.at/plugins/irfanview_plugins_432_setup.exe

I don't think anyone can get a aslr/dep bypass on it as there is only 6 bytes at esp (and only 4 seem usable) and you really need to execute code at that point.

Enjoy!