CVE-2012-3585: Irfanview Plugins

High severity, CVSS 9.3. EPSS: 7.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code via a crafted JLS file.

Affected products

• Irfanview Irfanview Plugins: up to and including 4.33

Published 2012-07-05. Last modified 2026-06-16.