Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image.
https://exchange.xforce.ibmcloud.com/vulnerabilities/74452
http://www.securityfocus.com/bid/52806
http://www.irfanview.com/history_old.htm