← Database

CVE-2009-2118

MEDIUM CVSS: 6.8 Published: 2009-06-18 Modified: 2026-06-16

Description

Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow.

Affected Platforms

Irfanview Irfanview

Weakness Type

CWE-94

References