Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Irfan View plugin vulnerability - fix available
Search Topic:
Uniqs:
1126
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security Software Updates 08 Apr 2009 »
« Congratulations To New and Re-Awardee 2009 MVP's  
AuthorAll Replies
-


MarkAW
Barry White or lil bratt
Premium
join:2001-08-27
Canada
·Bell Sympatico
·Cogeco Cable

reply to RWild
Re: Irfan View plugin vulnerability - fix available

Click for full size
said by RWild See Profile :

I just tried to update using the link in your post and got version 4.22 of EXIF and FORMATS, and 4.20 for NERO.

Anybody else checked versions on these files?

Edit:

www.irfanview.com/plugins.htm, the link Exidor posted has the new stuff.
Well i guess you didn't look hard enough.
--
Forget injuries, never forget kindnesses.

Reputation is what other people know about you. Honor is what you know about yourself.


Kearnstd
Elf Wizard
Premium
join:2002-01-22
Mullica Hill, NJ
reply to EGeezer
wow good find, id never have thought of a hole in a stand alone program like iview.
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports

SUMware
Premium
join:2002-05-21
reply to EGeezer
Thanks!


jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
·Comcast
·AT&T Southwest


2 edits
reply to EGeezer
Ok I'm confused. The fix is to update to version 4.23. According to the Infranview website the current Plugins is still only at 4.22 while the program itself is at 4.23.

Am I missing something? It appears the Plugins update to 4.23 is not available yet. Unless they simply updated some of the modules in 4.22 with the later 4.23 versions.

Edit: Ok I think I see now. It's the Formats Plugin that needs to be updated. The full 4.22 Plugin archive includes the updated 4.23 Formats Plugin. Jeesh how confusing! lol

Edit2: Nope...you have to download the Formats Plugin separately.


RWild
Them Or Us
Premium
join:2003-09-15
Cary, NC
·AT&T Southeast
·Windstream
·Comcast
·RoadRunner Cable


1 edit
reply to MarkAW
I just tried to update using the link in your post and got version 4.22 of EXIF and FORMATS, and 4.20 for NERO.

Anybody else checked versions on these files?

Edit:

www.irfanview.com/plugins.htm, the link Exidor posted has the new stuff.


cork1958
Cork

join:2000-02-26
Fruitport, MI
·Verizon Online DSL
·Charter Pipeline

reply to jack b
said by jack b See Profile :

Thanks for the heads-up. I use this little gem of a program ALL the time!
Yep,
Same here.

Install it on all computers I work on also.

Awesome little ditty!!

Thanks
--
The Firefox alternative.
»www.mozilla.org/projects/seamonkey/


exocet_cm
I am the law
Premium
join:2003-03-23
New Orleans, LA
clubs:
·Cox HSI
·Suddenlink
·Cingular Wireless
·AT&T Southeast
·Charter Pipeline

reply to jaykaykay
said by jaykaykay See Profile :

Thanks to you, many people will now get the heads up. So many people use that program and proabably wouldn't have known about it otherwise. Thank you, even though I nn longer use it.
I am one of those folks. Happened to see this thread title on the ticker from the front page.
--
"I have measured out my life with coffee spoons..." - T.S Eliot
"I have often regretted my speech, never my silence." - Publilius Syrus
Ma blog: »www.johndball.com

grumpi

join:2001-03-28
*****

1 edit
 reply to EGeezer
I'd already updated when it was released but didn't know about this.
Thanks for the heads up!!


jack b
Gone Fishing
Premium,MVM
join:2000-09-08
Cape Cod
clubs:
 reply to EGeezer
Thanks for the heads-up. I use this little gem of a program ALL the time!


Exidor
Premium
join:2001-05-04
Brampton, ON

reply to EGeezer
»www.irfanview.com/plugins.htm

The current PlugIns version is: 4.22

Plugins updated after the version 4.22:

# EXIF Plugin (4.23) - fixes loading of some very large text tags (possible crash in EXIF plugin 4.22)

# FORMATS Plugin (4.23) - fixes possible crash in loading of very large XPM images

# NERO Plugin (4.24) - added option to burn CDs using Windows Burning Enegine (Windows XP or later)


MarkAW
Barry White or lil bratt
Premium
join:2001-08-27
Canada
·Bell Sympatico
·Cogeco Cable


1 edit
reply to EGeezer
Thanks EG, but aren't they a little behind on this since IrFan View has had Version 4.23 out since December 12 2008.
Version 4.23 ( - CURRENT VERSION - ) (Release date: 2008-12-29) »www.irfanview.net/

Plugins updated after the version 4.22:

# EXIF Plugin (4.23) - Installer or ZIP - fixes loading of some very large text tags (possible crash in EXIF plugin 4.22)

# FORMATS Plugin (4.23) - Installer or ZIP - fixes possible crash in loading of very large XPM images

# NERO Plugin (4.24) - Installer or ZIP - added option to burn CDs using Windows Burning Enegine (Windows XP or later)


LadyL
Premium
join:2002-09-18
Lorain, OH

1 edit
reply to EGeezer
It states to update to version 4.23 - which I've already had installed. I don't use any of the plug-ins. I very seldom use Irfanview, but thanks for the notification.
--
Lonnie


VikingBob

join:2004-06-05
Ste Anne, MB
reply to EGeezer
Thanks muchly!


EGeezer
Go Bobcats
Premium
join:2002-08-04
Country!
reply to jaykaykay
I just hope the folks in dimaging see it -


jaykaykay
4 Ever Young
Premium,MVM
join:2000-04-13
Scottsdale, AZ
reply to EGeezer
Thanks to you, many people will now get the heads up. So many people use that program and proabably wouldn't have known about it otherwise. Thank you, even though I nn longer use it.


EGeezer
Go Bobcats
Premium
join:2002-08-04
Country!
  Thanks to governmentsecurity.org for the heads up and link;

»www.securityfocus.com/archive/1/502516
Forums » Up and Running » Security » SecuritySecurity Software Updates 08 Apr 2009 »
« Congratulations To New and Re-Awardee 2009 MVP's  


Thursday, 10-Dec 03:42:20 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [200] Sprint Sued For Distracted Driving Death
· [116] AT&T Launching New 24 Mbps U-Verse Tier
· [82] 3G Network Test Says AT&T Is Tops
· [72] Mediacom Unveils 105 Mbps Pricing
· [66] Sprint Poised For A Turnaround?
· [66] WPA Cracker: Test WPA-PSK Networks In 20 Minutes
· [66] AT&T Hints At Usage-Based iPhone Data Pricing
· [51] The Future Of Wi-Fi Is Bright
· [47] Site Leaks Yahoo, Verizon Fed Data Share Pricing
· [45] Microwaving Your Innards Is Not 'Extreme'
Most people now reading
· Battered Hilt Delimma [World of Warcraft]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· Cross Server Dungeon Experience [World of Warcraft]
· [WIN7] Outlook express under Windows 7? [Microsoft Help]
· [ Classes] Druid tanking: rotation and glyphs [World of Warcraft]
· Man Downloads Child Porn "Accidentally," Faces 20 Years [Security]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· The aftermath [World of Warcraft]