CVE-2017-2813

An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView.

• CWE-190

• http://www.securityfocus.com/bid/98046Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0310Third Party Advisory
• http://www.securityfocus.com/bid/98046Third Party Advisory, VDB Entry
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0310Third Party Advisory

Published

Jun 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2807An exploitable buffer overflow vulnerability exists in the t…7.5
• CVE-2017-2808An exploitable use-after-free vulnerability exists in the ac…7.5
• CVE-2017-2809An exploitable vulnerability exists in the yaml loading func…7.5
• CVE-2017-2810An exploitable vulnerability exists in the Databook loading …7.5
• CVE-2017-2811A code execution vulnerability exists in the Kakadu SDK 7.9'…8.8
• CVE-2017-2812A code execution vulnerability exists in the kdu_buffered_ex…8.8
• CVE-2017-2814An exploitable heap overflow vulnerability exists in the ima…7.5
• CVE-2017-2815An exploitable XML entity injection vulnerability exists in …8.1
• CVE-2017-2816An exploitable buffer overflow vulnerability exists in the t…8.8
• CVE-2017-2817A stack buffer overflow vulnerability exists in the ISO pars…8.8
• CVE-2017-2818An exploitable heap overflow vulnerability exists in the ima…7.5
• CVE-2017-2819An exploitable heap-based buffer overflow exists in the Hang…8.8