CVE-2017-10733
HighSummary
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control in ntdll.
Risk Assessment
The organization may be exposed to attacks leading to denial of service, which can disrupt the availability of applications and services.
Recommendation
It is recommended to update IrfanView to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32-bit)
See all- CVE-2017-9530High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to the use of data from a faulting address as arguments in subsequent function calls.
- CVE-2017-10735High
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to branch selection control concerning the faulting address.
- CVE-2017-10732High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue relates to branch selection control in the memory allocation function.
Original NVD description (English source)
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpEnterCriticalSectionContended+0x0000000000000031."