CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15759
https://notcve.org/view.php?id=CVE-2017-15759
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3." IrfanView 4.50 - (64bit), con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15759 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-15768
https://notcve.org/view.php?id=CVE-2017-15768
IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Data from Faulting Address controls Branch Selection starting at image000007f7_42060000+0x0000000000094113." IrfanView 4.50 - 64bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .tif manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address controls Branch Selection comenzando en image000007f7_42060000+0x0000000000094113". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15768 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15764
https://notcve.org/view.php?id=CVE-2017-15764
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0." IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15764 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-15769
https://notcve.org/view.php?id=CVE-2017-15769
IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22." IrfanView 4.50 - 64bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dds manipulado. Esta vulnerabilidad está relacionada con "Read Access Violation starting at FORMATS!ReadBLP_W+0x0000000000001b22". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15769 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15755
https://notcve.org/view.php?id=CVE-2017-15755
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091." IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15755 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •