1. Symantec-Broadcom-Horizontal/
  2. Security Response/
  3. Attack Signatures/
  4. Attack: IrfanView Formats Plugin TTF File BO

Attack: IrfanView Formats Plugin TTF File BO

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects an attempt to exploit a buffer overflow vulnerability in IrfanView Formats PlugIn.

Additional Information

Formats PlugIn is a plugin to process rare image files for the IrfanView image viewer application.

Formats PlugIn is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Specifically, the issue occurs when processing TTF font names from a specially crafted font file.

Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts likely result in denial-of-service conditions.

Affected

  • Formats PlugIn 4.33

Additional References

  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube