CVE-2010-1509: IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD ima...

Security readout for executives and security teams

Older IrfanView versions can crash, and may run attacker-controlled code, when they process a malicious Photoshop PSD image. The main business risk is compromised or disrupted user workstations if staff open untrusted images. The source bundle does not show active exploitation. Exposure is most likely on endpoints running IrfanView before 4.27, especially where users open PSD files from email, downloads, shared drives, or external submissions. Server exposure is only plausible if IrfanView is used in automated image-processing workflows. Prioritize remediation where IrfanView is present on business workstations or image-handling systems. This is an old vulnerability, but possible code execution through a file-open workflow makes unsupported legacy installations unacceptable. Mitigation focus: Upgrade IrfanView to version 4.27 or later.; Remove legacy IrfanView versions from managed endpoints.; Restrict opening untrusted PSD files in vulnerable installations..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.