CVE-2017-10729
HighSummary
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a critical section management issue.
Risk Assessment
This vulnerability can lead to serious consequences, including system takeover or disruption of service. Organizations should be aware of the risks associated with using this version of the software.
Recommendation
It is recommended to update IrfanView to the latest version to mitigate the risks associated with this vulnerability. Additionally, avoid opening unknown .rle files.
Other vulnerabilities in IrfanView 4.44 (32bit)
See all- CVE-2017-15264High
IrfanView version 4.44 (32bit) contains a vulnerability that allows attackers to cause a denial of service or potentially have unspecified other impact via a crafted .tif file.
- CVE-2017-8766High
IrfanView version 4.44 (32bit) allows remote attackers to execute code via a crafted .mov file, due to a 'User Mode Write AV near NULL' issue.
- CVE-2017-8369High
IrfanView version 4.44 (32bit) has a branch selection control issue that may allow attackers to execute arbitrary code via a crafted file.
- CVE-2017-10734High
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to 'Invalid Handle'.
- CVE-2017-10731High
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a 'User Mode Write AV'.
- CVE-2017-10730High
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a user mode write AV.
Original NVD description (English source)
IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll_77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."