Software Vulnerability - CVE-2021-27362

[ZaphodBeeblebrox]

Support,

I received a vulnerability report today from Acronis True Image 2021, Build 39216, that IrfanView 4.57 has a read access violation.

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to execute arbitrary code.

See: https://cve.mitre.org/cgi-bin/cvenam...CVE-2021-27362

Please advise if you are aware of this and if so, what action is required to address this issue please?

Regards
Patrick

[Bhikkhu Pesala]

Send a bug report to the author: Irfan Skiljan (Help menu, About IrfanView).
He does not visit this user-to-user forum.

[JendaLinda]

This bug was already fixed. You have to download the new version of the WPG plugin manually, see "PlugIns updated after the version 4.57".

https://www.irfanview.com/plugins.htm