CVE-2017-10732
HighSummary
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue relates to branch selection control in the memory allocation function.
Risk Assessment
The organization may be exposed to attacks leading to denial of service, which can disrupt the availability of applications and services. Potential unspecified impacts may also affect system integrity.
Recommendation
It is recommended to update IrfanView to the latest version to minimize the risk associated with this vulnerability. Additionally, monitor and restrict opening .rle files from unknown sources.
Other vulnerabilities in IrfanView 4.44 (32-bit)
See all- CVE-2017-9530High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to the use of data from a faulting address as arguments in subsequent function calls.
- CVE-2017-10735High
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to branch selection control concerning the faulting address.
- CVE-2017-10733High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control in ntdll.
Original NVD description (English source)
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpAllocateHeap+0x0000000000000429."