CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14539
https://notcve.org/view.php?id=CVE-2017-14539
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x000000000011d767." IrfanView 4.44 - 32bit permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .svg manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x000000000011d767". • http://www.irfanview.net/main_history.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14539 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-9917
https://notcve.org/view.php?id=CVE-2017-9917
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!RtlFreeHandle+0x0000000000000218." IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a "Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!RtlFreeHandle+0x0000000000000218." • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9917 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-9920
https://notcve.org/view.php?id=CVE-2017-9920
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e." IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a "Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e." • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9920 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-10926
https://notcve.org/view.php?id=CVE-2017-10926
IrfanView 4.44 (32bit) with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d." IrfanView versión 4.44 (en 32 bits) con Plugin FPX versión 4.47, podría permitir a los atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado por medio de un archivo .fpx creado, relacionado a una "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d". • http://www.irfanview.net/main_history.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10926 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-10729
https://notcve.org/view.php?id=CVE-2017-10729
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121." IrfanView versión 4.44 (en 32 bits), permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121." • http://www.irfanview.com/plugins.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10729 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •