This from Secunia: 2) This Week in Brief: Secunia Research disclosed a vulnerability this week in Irfanview, the popular Windows image viewer software. The vulnerability is due to a boundary error when importing palette (.PAL) files, and can cause a stack-based buffer overflow. The vulnerability can easily be exploited by enticing a user into importing a specially crafted .PAL file, and allows an attacker to execute arbitrary code on the system. Users are urged to upgrade to the latest version, 4.10, to solve this vulnerability. For more information, refer to: Secunia has constructed the Secunia Personal Software Inspector, which you can use to check if your personal system is vulnerable: Roger On 18 Oct 2007, at 5:15 AM, Alexander Georgiadis wrote: I have noticed these scam sites for other freeware lately. I hate to think what these crooks will do with the credit card numbers of their victims. |