Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-23563: IrfanView PlugIns

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.

CVE
#web#windows#apple#microsoft#git#pdf#ssh#ssl

Please always use the current IrfanView and PlugIn version.

How to install IrfanView PlugIns?

  1. Download all PlugIns, see below
  2. Click on the PlugIn file (irfanview_plugins_XYZ_setup.exe)
  3. PlugIns will be installed into IrfanView “PlugIns” directory

Note: Install 32-bit PlugIns to IrfanView-32 and 64-bit PlugIns to IrfanView-64 folder. DO NOT mix the PlugIns and IrfanView bit versions.

The current PlugIns version is: 4.60

Note: A normal IrfanView version includes the following (most important) PlugIns: Effects, Paint, Icons, Slideshow-EXE, RegionCapture, JPG-Transform, Video, Metadata, Tools.

Check the 64-bit page for 64-bit PlugIns.

  1. You can download ALL (32-bit) PlugIns as one large EXE (recommended): FossHub - download IrfanView plugins Installer

    Alternative download site: iview460_plugins_setup.exe (20.2 MB, installer)
    (SHA-256 checksum: 0a967a007c296944575962e66586bfada7c32012675dc1a0ae1cec982bb755f8)

  1. You can download ALL (32-bit) PlugIns as one large ZIP (for experienced users!): FossHub - download IrfanView plugins ZIP

    Alternative download site: iview460_plugins.zip (18.4 MB)
    (SHA-256 checksum: 628a088067c0e4baf02ab87698fc0bf66b2b59cb1eee9ff08c95535e741cd654)

Special PlugIn: "IrfanView Shell Extension":

This PlugIn shows a Context menu for some IrfanView operations in Windows Explorer or other file managers.
You can select several files and: Play slideshow, Load files in Thumbnails window, Start JPG Lossless Rotation, Convert images to another format, Save filenames as TXT, Create multipage TIF or PDF, Create panorama image. (current version: 1.06)

Download: https://www.irfanview.net/plugins/irfanview_shell_extension_plugin.exe (Installer)
(SHA-256 checksum: b9828e236b26626b46fe20ad31208140fc572819ba86c2cba75cbd2c7724ebef)

or

https://www.irfanview.net/plugins/irfanview_shell_extension.zip (ZIP, for experienced users!)
(SHA-256 checksum: 2112f85a917b2eca90eaa047a8c3b22e0157f13e83971aee679d955b2ff1047d)

You can download the (32-bit) PlugIns as 4 separate ZIP files (for experienced users!):

  1. iv_mmedia.zip. Contains these PlugIns: IV_Player, Med, Mp3, Burning, Nero, Quicktime, Real Audio, SoundPlayer.
  2. iv_formats.zip. Contains these PlugIns: Awd, B3d, BabaCAD4Image, CamRAW, Crw, CADImage, Dicom, DjVu, Dpx, Ecw, Exr, Flash, Flif, Formats, Fpx, Hdp, Ics, ImPDF, ImPDN, JPEG2000, Jpeg_LS, Jpm, Mng, MrSID, PDF, PhotoCD, OptiPNG, Postscript, Sff, Svg, Wbz, WebP, Wsq, Xcf.
  3. iv_effects.zip. Contains these PlugIns: Filter Sandbox, Film Simulation, Filter Factory, Filters Unlimited.
  4. iv_misc.zip. Contains these PlugIns: Email, FaceDetect, Ftp, Lcms.

PlugIns updated after the version 4.60:

  • CamRAW Plugin (4.60) - ZIP (32 bit) or ZIP (64 bit) - Support for Olympus OM-1 RAW format

Available PlugIns and current versions:

  • AltaLux - (version 1.08): allows IrfanView to use AltaLux image effect
  • AWD - (version 2.0.0.0): allows IrfanView to read Artweaver files
  • B3D - (version 4.56): allows IrfanView to read BodyPaint 3D files
  • BabaCAD4Image - (version 1.3.2): allows IrfanView to to read DXF and DWG CAD files
  • BURNING - (version 4.51): allows IrfanView to burn slideshow to a CD/DVD/BD (Windows XP SP3 or later required)
  • BURNINGOLD - (version 4.36): allows IrfanView (32-bit) to burn slideshow to a CD (Windows XP or later required, Nero option can burn Data DVD and VCD)
  • CADImage - (version 14.0.0.1): allows IrfanView to read DXF/DWG/HPGL/CGM/SVG files (Shareware, third party plugin)
    Newest 32-bit versions under: https://www.cadsofttools.com/download/irfanviewplugins.zip , newest 64-bit versions: https://www.cadsofttools.com/download/irfanviewplugins_x64.zip
  • CamRAW - (version 4.58): allows IrfanView to to read Digital Camera RAW files
    (formats: DNG, EEF, NEF, ORF, RAF, MRW, DCR, SRF/ARW, PEF, X3F)
  • CRW - (version 4.58): allows IrfanView (32-bit) to read Canon CRW/CR2 files (high resolution image version) **
    Note:** this PlugIn requires additional Canon DLLs. You can download these DLLs with the Canon ZoomBrowser program: https://www.canon.com/ or try here: https://www.irfanview.info/plugins/canon_crw.zip (check “Readme.txt” for instructions and install!)
  • DICOM - (version 4.60): allows IrfanView to read Dicom formats (DCM, ACR, IMA)
  • DJVU - (version 4.56): allows IrfanView to read DJVU format
  • DPX - (version 4.56): allows IrfanView to read DPX/CIN (Digital Picture Exchange/Cineon) format
  • ECW - (version 4.56): allows IrfanView to read/write ECW files (Enhanced Compressed Wavelet)
  • EFFECTS - (version 4.59): contains image effects and allows IrfanView to load Adobe Photoshop 8BF filters Note: some nice (fixed menu) Adobe 8BF Plugins/effects can be downloaded/installed from: https://www.irfanview.net/plugins/irfanview_adobe_8bf_plugins.exe (Installer) or https://www.irfanview.net/plugins/irfanview_adobe_8bf_plugins.zip **
    Note:** some older/special 8BFs may require additional system DLLs: Msvcrt10.dll and/or Plugin.dll. You can download these DLLs here: https://www.irfanview.info/plugins/8bf_tools.zip (check “Readme.txt” for instructions and install!)
  • EMAIL - (version 4.59): allows IrfanView to send images as emails
  • EXR - (version 4.56): allows IrfanView to read EXR files
  • FACEDETECT - (version 2.00): allows IrfanView to use the Face Detection feature from Thumbnails window
    If you have a modern graphic card which can be used for additional calculations, you can try the GPU version of the plugin: https://www.irfanview.info/plugins/facedetect_gpu.zip
  • FILM_SIMULATION - (version 1.0.0.0): allows IrfanView to apply some Film Simulation effects **
    Note:** this PlugIn needs additional CLUT files, download/install from: https://www.irfanview.net/plugins/irfanview_film_sim_plugin.zip
  • FILTER_FACTORY - (version 4.53): allows IrfanView to use Filter Factory 8BF files (Photoshop PlugIns)
  • FLASH - (version 2.2.0.1): allows IrfanView to read Flash/Shockwave/FLV format
  • FLIF - (version 4.56): allows IrfanView to read FLIF (Free Lossless Image) format
  • FORMATS - (version 4.60): allows IrfanView to read some rare image formats
    (formats: PCX, QOI, PSP, DDS, G3, RAS, IFF/LBM, BioRAD, Mosaic, XBM, XPM, GEM-IMG, SGI, RLE, WBMP, TTF, FITS, PIC, MAG, WAD, WAL, CAM, SFW, YUV, PVR, SIF and old/retro formats from Amiga, Atari, C64, ZX Spectrum etc.)
  • FPX - (version 4.56): allows IrfanView (32-bit) to read FlashPix files
  • FTP - (version 4.50): allows IrfanView to transfer files from Thumbnails window using FTP
  • FILTERS_UNLIMITED - (version 3.20): allows IrfanView (32-bit) to use Filters Unlimited files (Photoshop PlugIns and filters)
  • HDP - (version 4.56): allows IrfanView to read Jpeg-XR/HDP/WDP (Microsoft HD Photo) files
  • ICONS - (version 4.30): additional icons for IrfanView file associations
  • ICS - (version 4.56): allows IrfanView (32-bit) to read ICS files (Image Cytometry Standard)
  • IMPDF - (version 0.90): allows IrfanView (32-bit) to write PDF files (Portable Document Format)
  • IMPDN - (version 1.16): allows IrfanView to read PDN files (Paint.NET File Format)
  • IRFANVIEW_SANDBOX - (version 1.3.0.14): allows IrfanView to use JewelScript Effects/Filters
  • IV_PLAYER - (version 4.54): allows IrfanView to play video/sound/audio-cd files using Windows Media Player
  • JPEG2000 - (version 4.56): allows IrfanView to read/write JPEG 2000 files
  • JPEG_LS - (version 4.56): allows IrfanView to read/write JPEG-LS files
  • JPEG_XL - (version 4.59.1): allows IrfanView to read/write JPEG-XL files
  • JPEGQS - (version 2020-05-17): allows IrfanView to read JPG files using QuantSmooth method
  • JPG_TRANSFORM - (version 4.59): allows IrfanView to support lossless JPG operations (rotation/crop/cleaning, EXIF date editing, EXIF thumb update)
  • JPM - (version 4.56): allows IrfanView to read/write JPM files
  • LCMS - (version 4.58): allows IrfanView to use color management
  • MED - (version 3.31): allows IrfanView (32-bit) to play MED/OctaMED audio files
  • METADATA - (version 4.60): allows IrfanView to handle EXIF/IPTC/Comment information from compatible files
  • MNG - (version 4.57): allows IrfanView to read/play MNG/JNG files
  • MP3 - (version 4.52): allows IrfanView to play MP3/MP2/MP1 files
  • MRC - (version 3.70): allows IrfanView (32-bit) to read MRC files
  • MR-SID - (version 4.56): allows IrfanView to read LizardTech’s SID files **
    Note:** this PlugIn needs additional DLLs (for IrfanView 32-bit only), download/install from: https://www.irfanview.net/plugins/irfanview_mrsid_plugin.exe (Installer) or https://www.irfanview.net/plugins/irfanview_mrsid_plugin.zip
  • NERO - (version 4.20): allows IrfanView (32-bit) to burn slideshow to data or Video CD, using Nero Burning ROM software
  • OCR_KADMOS - (version 4.4y): adds OCR features to IrfanView PlugIn download: https://www.irfanview.info/plugins/kadmos/**
    Note: the OCR PlugIn works only with IrfanView 32-bit.**
  • OPTIPNG - (version 4.59): this PlugIn allows optimized PNG saving
  • PAINT - (version 0.4.13.57): allows IrfanView to to paint lines, circles, arrows, straighten image etc.
  • PDF - (version 4.58): allows IrfanView to read/save PDF files (Portable Document Format)
  • PHOTO-CD - (version 3.00): allows IrfanView to read Kodak PCD files (high resolutions)
  • POSTSCRIPT - (version 4.59): allows IrfanView to read EPS/PS/PDF files (using Ghostscript, take the 32-bit (!) EXE installer, like “gs926w32.exe”) or Ghostscript 64-bit for IrfanView 64-bit (like “gs926w64.exe”).
  • QUICKTIME - (version 4.56): allows IrfanView to play/read Apple Quicktime files
  • REAL-AUDIO - (version 3.37): allows IrfanView (32-bit) to play Real-Audio RA files
  • REGIONCAPTURE - (version 2.4.3): allows IrfanView to capture a rectangle area of the screen
  • SFF - (version 4.56): allows IrfanView to read SFF (Structured Fax) Files
  • SLIDESHOW - (version 4.57): allows IrfanView to create presentations in EXE or SCR format (standalone executable/screen saver)
  • SOUND_PLAYER - (version 4.39): allows IrfanView to play OGG files (Ogg Vorbis)
  • STUB_LOADER - (version 1.2.5): allows loading of old (32 bit) PlugIns in IrfanView 64 bit (used also for scanning in IrfanView-64)
  • SVG - (version 0.85): allows IrfanView to read SVG (Scalable Vector Graphic) files
  • TOOLS - (version 4.58): contains some additional functions/features for IrfanView
    (and some special formats, like: HEIC, AVIF; with installed codecs/extensions)
  • VIDEO - (version 4.57): allows IrfanView to play many video/sound formats
  • WBZ - (version 1.01): allows IrfanView to read WebShots (WBZ/WBC/WB1) files
  • WEBP - (version 4.57): allows IrfanView to read/write WEBP (Weppy Format) files
  • WPG - (version 3.1.2): allows IrfanView to read WPG (version 1) files
  • WSQ - (version 2019.10.15): allows IrfanView to read WSQ (Wavelet Scaler Quantization) files
  • XCF - (version 0.1.4): allows IrfanView to read XCF files

For developers: If you want to write your own plugins for IrfanView (support for new image formats or effects (please no private formats)), please send me an email for details.

Related news

CVE-2022-42984: GitHub - nhiephon/Research

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907