CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-9916
https://notcve.org/view.php?id=CVE-2017-9916
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlFreeHandle+0x00000000000001b6." IrfanView en su versión 4.44 (32bits) con el plugin TOOLS en su versión 4.50 puede que permita a un atacante causar una denegación de servicio o ejecutar código arbitrario mediantes un archivo modificado, relacionado a "Data from Faulting Address controls Branch Selection que comienza en ntdll_77df0000!RtlFreeHandle+0x00000000000001b6." • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9916 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-9885
https://notcve.org/view.php?id=CVE-2017-9885
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000006a98." IrfanView en su versión 4.44 (32bit) con el plugin 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado Faulting Address es usado como uno o mas argumentos en una subsecuencia Function Call comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x0000000000006a98." • http://www.irfanview.com/plugins.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9885 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-9883
https://notcve.org/view.php?id=CVE-2017-9883
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216." IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacante ejecutar código aleatorio o causar una denegación de servicio mediante un archivo .fpx manipulado, relacionado a "Data from Faulting Address controls Code Flow comenzando en FPX+0x0000000000007216." • http://www.irfanview.com/plugins.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9883 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-9888
https://notcve.org/view.php?id=CVE-2017-9888
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPX_GetScanDevicePropertyGroup+0x00000000000031a0." IrfanView en su versión 4.44 (32bit) con el plugin FPX 4.46 permite a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado mediante un archivo .fpx manipulado, relacionado a "Data from Faulting Address controls Branch Selection comenzando en FPX!FPX_GetScanDevicePropertyGroup+0x00000000000031a0." • http://www.irfanview.com/plugins.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-9888 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-10730
https://notcve.org/view.php?id=CVE-2017-10730
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96." IrfanView versión 4.44 (en 32 bits), permite a los atacantes ejecutar código arbitrario o causar una denegación de servicio por medio de un archivo .rle creado, relacionado a un "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96." • http://www.irfanview.com/plugins.htm https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10730 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •