CVE-1999-1112: Irfanview

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.

Affected products

• Irfanview Irfanview: up to and including 3.0.7

Published 1999-11-09. Last modified 2026-06-16.