CVE-2006-4374: Irfanview

Low severity, CVSS 2.6. EPSS: 2.7% chance of exploitation in the next 30 days.

IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a crafted ANI image file, possibly due to a buffer overflow.

Affected products

• Irfanview Irfanview: version 3.98 only

Published 2006-08-26. Last modified 2026-06-16.