Double Free Vulnerability in FlashPix PlugIn for IrfanView
CVE-2012-0025

Currently unrated

Key Information:

Vendor: Irfanview
Status: FlasHPix Plugin
Vendor: CVE Published:; 2 November 2012

What is CVE-2012-0025?

A double free vulnerability exists in the Free_All_Memory function within the libfpx library, specifically affecting the FlashPix PlugIn version 4.2.2.0 for IrfanView. This flaw enables remote attackers to execute a denial of service attack, potentially crashing the application when processing a maliciously constructed FPX image file. Users of IrfanView should be cautious and ensure their installation of the plugin is updated to the latest version to mitigate this risk.