BraniX has discovered some vulnerabilities in the LuraWave PlugIn for IrfanView, which can be exploited by malicious people to potentially compromise a user's system.

1) An input validation error in the parsing of dimension fields in the LWF header can be exploited to cause a heap-based buffer overflow during decoding.

2) An integer overflow error when calculating the amount of required memory for decoding based on a certain byte value in the LWF header can be exploited to cause a heap-based buffer overflow.

3) An input validation error when calculating the amount of required memory for decoding based on a certain byte value in the LWF header can be exploited to cause a heap-based buffer overflow.

4) An integer overflow error when calculating the amount of required memory for decoding based on a certain word value in the LWF header can be exploited to cause a heap-based buffer overflow.

The vulnerabilities are confirmed in version 4.2.2. Other versions may also be affected.

Solution
No updated version of the plugin will be made available. The vendor has removed the plugin in version 4.28 of the plugins distribution.

Provided and/or discovered by
BraniX via Secunia.

Additional details provided by Secunia Research.

Original Advisory
http://irfanview.com/main_history.htm

Deep Links
Links available to Secunia VIM customers