CVE:CVE-2013-5351
CNNVD:CNNVD-201312-529
IrfanView是波黑软件开发者Irfan Skiljan所研发的一款图片浏览器，它支持图片浏览、图片编辑、图片格式转换等。
IrfanView 4.37之前的版本中存在基于堆的缓冲区溢出漏洞，该漏洞源于当程序处理文件中的LZW代码流时存在边界错误。远程攻击者可利用该漏洞执行任意代码。
solution:Upgrade irfanview irfanview to a higher version than 4.36,1.70,1.75,1.80,1.85,1.90,1.95,1.97,1.98,1.98a,1.99,2.00,2.05,2.07,2.10,2.12,2.15,2.17,2.18,2.20,2.22,2.25,2.27,2.30,2.32,2.35,2.37,2.40,2.50,2.52,2.55,2.60,2.62,2.63,2.65,2.66,2.68,2.80,2.82,2.83,2.85,2.90,2.92,2.95,2.97,2.98,3.00,3.0.7,3.02,3.05,3.07,3.10,3.12,3.15,3.17,3.20,3.21,3.25,3.30,3.33,3.35,3.36,3.50,3.51,3.60,3.61,3.70,3.75,3.80,3.85,3.90,3.91,3.92,3.95,3.97,3.98,3.99,4.00,4.10,4.20,4.22,4.23,4.25,4.27,4.28,4.30,4.32,4.33,4.35,and avoid the version (,4.36],1.70,1.75,1.80,1.85,1.90,1.95,1.97,1.98,1.98a,1.99,2.00,2.05,2.07,2.10,2.12,2.15,2.17,2.18,2.20,2.22,2.25,2.27,2.30,2.32,2.35,2.37,2.40,2.50,2.52,2.55,2.60,2.62,2.63,2.65,2.66,2.68,2.80,2.82,2.83,2.85,2.90,2.92,2.95,2.97,2.98,3.00,3.0.7,3.02,3.05,3.07,3.10,3.12,3.15,3.17,3.20,3.21,3.25,3.30,3.33,3.35,3.36,3.50,3.51,3.60,3.61,3.70,3.75,3.80,3.85,3.90,3.91,3.92,3.95,3.97,3.98,3.99,4.00,4.10,4.20,4.22,4.23,4.25,4.27,4.28,4.30,4.32,4.33,4.35