Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service (crash) via a crafted FPX image.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=31&Itemid=31 | x_refsource_MISC |
| http://secunia.com/advisories/47322 | third-party-advisory x_refsource_SECUNIA |
| http://www.osvdb.org/77958 | vdb-entry x_refsource_OSVDB |
| http://www.imagemagick.org/download/delegates/libfpx-1.3.1-1.zip | x_refsource_CONFIRM |
| http://www.openwall.com/lists/oss-security/2012/01/03/16 | mailing-list x_refsource_MLIST |
| http://secunia.com/advisories/47246 | third-party-advisory x_refsource_SECUNIA |
| http://www.exploit-db.com/exploits/18256 | exploit x_refsource_EXPLOIT-DB |
| https://security.gentoo.org/glsa/201605-03 | vendor-advisory x_refsource_GENTOO |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/71892 | vdb-entry x_refsource_XF |
| http://www.openwall.com/lists/oss-security/2012/11/02/6 | mailing-list x_refsource_MLIST |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=31&Itemid=31 | x_refsource_MISC x_transferred |
| http://secunia.com/advisories/47322 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.osvdb.org/77958 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.imagemagick.org/download/delegates/libfpx-1.3.1-1.zip | x_refsource_CONFIRM x_transferred |
| http://www.openwall.com/lists/oss-security/2012/01/03/16 | mailing-list x_refsource_MLIST x_transferred |
| http://secunia.com/advisories/47246 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.exploit-db.com/exploits/18256 | exploit x_refsource_EXPLOIT-DB x_transferred |
| https://security.gentoo.org/glsa/201605-03 | vendor-advisory x_refsource_GENTOO x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/71892 | vdb-entry x_refsource_XF x_transferred |
| http://www.openwall.com/lists/oss-security/2012/11/02/6 | mailing-list x_refsource_MLIST x_transferred |