CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15765
https://notcve.org/view.php?id=CVE-2017-15765
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462." IrfanView 4.50 - 64bit con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15746
https://notcve.org/view.php?id=CVE-2017-15746
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3." IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15746 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15767
https://notcve.org/view.php?id=CVE-2017-15767
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52." IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15767 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15743
https://notcve.org/view.php?id=CVE-2017-15743
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0." IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15743 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15747
https://notcve.org/view.php?id=CVE-2017-15747
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad." IrfanView 4.50 - (64bit), con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15747 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •