BraniX has discovered a vulnerability in the LuraDocument Format PlugIn for IrfanView, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an error within the LuraDocument Format PlugIn and can be exploited to cause a memory corruption by e.g. tricking a user into opening a specially crafted LDF file.

The vulnerability is confirmed in version 4.2.2. Other versions may also be affected.

Solution
No updated version of the plugin will be made available. The vendor has removed the plugin in version 4.28 of the plugins distribution.

Provided and/or discovered by
BraniX via Secunia.

Original Advisory
http://irfanview.com/main_history.htm

Deep Links
Links available to Secunia VIM customers