| CNNVD-ID编号 | CNNVD-201005-223 |
| CVE编号 | CVE-2010-1510 |
| 发布时间 | 2010-05-14 |
| 更新时间 | 2010-05-14 |
| 漏洞类型 | 缓冲区溢出 |
| 漏洞来源 | Stefan Cornelius, Secunia Research |
| 危险等级 | 中危 |
| 威胁类型 | 远程 |
| 厂 商 | irfanview |
IrfanView是波黑软件开发者Irfan Skiljan所研发的一款图片浏览器，它支持图片浏览、图片编辑、图片格式转换等。
IrfanView存在基于堆的缓冲区溢出，远程攻击者可通过使用RLE压缩的特制PSD图像引发拒绝服务(应用程序崩溃)，或可执行任意代码。
目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
IrfanView IrfanView 4.01
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 4.10
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 4.25
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 3.95
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 4.00
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 3.99
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 4.23
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 3.97
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 3.98
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
IrfanView IrfanView 3.99
IrfanView iview427.zip
http://download.cnet.com/IrfanView/3000-2192_4-10021962.html?part=dl-I rfanView&subj=dl&tag=button
来源: MISC
来源: SECUNIA
名称: 39036