Broadband Tech > Security > Security > Irfan View plugin vulnerability - fix available

Irfan View plugin vulnerability - fix available

Thanks to you, many people will now get the heads up. So many people use that program and proabably wouldn't have known about it otherwise. Thank you, even though I nn longer use it.

I just hope the folks in dimaging see it -

reply to EGeezer
Thanks muchly!

reply to EGeezer
It states to update to version 4.23 - which I've already had installed. I don't use any of the plug-ins. I very seldom use Irfanview, but thanks for the notification.
--
Lonnie

reply to EGeezer
Thanks EG, but aren't they a little behind on this since IrFan View has had Version 4.23 out since December 12 2008.
Version 4.23 ( - CURRENT VERSION - ) (Release date: 2008-12-29) »www.irfanview.net/

Plugins updated after the version 4.22:

# EXIF Plugin (4.23) - Installer or ZIP - fixes loading of some very large text tags (possible crash in EXIF plugin 4.22)

# FORMATS Plugin (4.23) - Installer or ZIP - fixes possible crash in loading of very large XPM images

# NERO Plugin (4.24) - Installer or ZIP - added option to burn CDs using Windows Burning Enegine (Windows XP or later)

reply to EGeezer
»www.irfanview.com/plugins.htm

The current PlugIns version is: 4.22

Plugins updated after the version 4.22:

# EXIF Plugin (4.23) - fixes loading of some very large text tags (possible crash in EXIF plugin 4.22)

# FORMATS Plugin (4.23) - fixes possible crash in loading of very large XPM images

# NERO Plugin (4.24) - added option to burn CDs using Windows Burning Enegine (Windows XP or later)

reply to EGeezer
Thanks for the heads-up. I use this little gem of a program ALL the time!

reply to EGeezer
I'd already updated when it was released but didn't know about this.
Thanks for the heads up!!

reply to jaykaykay

reply to jack b

reply to MarkAW
I just tried to update using the link in your post and got version 4.22 of EXIF and FORMATS, and 4.20 for NERO.

Anybody else checked versions on these files?

Edit:

www.irfanview.com/plugins.htm, the link Exidor posted has the new stuff.

reply to EGeezer
Ok I'm confused. The fix is to update to version 4.23. According to the Infranview website the current Plugins is still only at 4.22 while the program itself is at 4.23.

Am I missing something? It appears the Plugins update to 4.23 is not available yet. Unless they simply updated some of the modules in 4.22 with the later 4.23 versions.

Edit: Ok I think I see now. It's the Formats Plugin that needs to be updated. The full 4.22 Plugin archive includes the updated 4.23 Formats Plugin. Jeesh how confusing! lol

Edit2: Nope...you have to download the Formats Plugin separately.

reply to EGeezer
Thanks!

reply to EGeezer
wow good find, id never have thought of a hole in a stand alone program like iview.
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports

reply to RWild