New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

irfanview_jpeg2000_bof: review of pull req #543 #546

Merged

wchen-r7 merged 3 commits into rapid7:master from jvazquez-r7:review_irfanview

Jun 30, 2012

Contributor

jvazquez-r7 commented Jun 29, 2012

Review of the pull request #543 by mrmee.

Added OSVDB reference
Fixed jmp esp addresses for versions 4.32 and 4.33 of irfanview

The exploit works when:

Drag and drop the file to irfanview
Right button -> Open with irfanview
File - Open (preview) with debugger (windbg
File - Open with debugger (windbg)

The exploit doesn't work when:

File - Open (preview) without debugger
File - Open without debugger

jvazquez-r7 added 2 commits

June 29, 2012 20:13


          irfanview_jpeg2000_bof: review of pull req #543

533111c


          versions affected corrected

19d4761

jvazquez-r7 mentioned this pull request

Exploit for CVE-2012-0897 - irfanview .jp2 processing stack buffer overflow #543

Closed


          last cleanup

5dbfb7b

wchen-r7 merged commit 5dbfb7b into rapid7:master

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment