A vulnerability has been discovered in FastStone Image Viewer, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the processing of BMP images and can be exploited to corrupt memory via a specially crafted BMP image with overly large dimensions.

Successful exploitation allows execution of arbitrary code when viewing a malicious BMP image.

The vulnerability is reported in version 2.9 and also confirmed in version 3.0. Other versions may also be affected.

Solution
Only view trusted images.

Provided and/or discovered by
Ivan Fratric

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html

Deep Links
Links available to Secunia VIM customers