CVE-2006-4231: Irfanview

Low severity, CVSS 2.6. EPSS: 1.3% chance of exploitation in the next 30 days.

IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file.

Affected products

• Irfanview Irfanview: version 3.98 only

Published 2006-08-18. Last modified 2026-06-16.