[Donna]

Secunia Research has discovered a vulnerability in IrfanView's Formats plug-in, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an integer overflow when processing XPM files with certain dimensions. This can be exploited to cause a heap-based buffer overflow by e.g. tricking a user into opening a specially crafted XPM file.
The vulnerability is confirmed in version 4.22. Other versions may also be affected.

http://secunia.com/advisories/34525/
http://www.irfanview.com/