Denial of Service Vulnerability in IrfanView by Irfan Skiljan
CVE-2020-23546
7.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-23546?
IrfanView 4.54 has a vulnerability that allows attackers to trigger a denial of service or potentially other unspecified effects by using specially crafted XBM files. This issue arises when the application mishandles problematic data during processing, particularly at the point where it reads a mosaic, leading to a failure in function execution. Users of IrfanView are urged to apply updates and patches to mitigate potential risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.