| Package | Affected versions | Patched versions |
|---|---|---|
| formats | = 4.00= 4.10= 4.20≤ 4.22 |
Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large XPM file that triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free