CVE-2017-10735
HighSummary
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to branch selection control concerning the faulting address.
Risk Assessment
The organization may be vulnerable to attacks that lead to denial of service, potentially disrupting service availability and impacting business operations.
Recommendation
It is recommended to update IrfanView to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32-bit)
See all- CVE-2017-9530High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to the use of data from a faulting address as arguments in subsequent function calls.
- CVE-2017-10733High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control in ntdll.
- CVE-2017-10732High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue relates to branch selection control in the memory allocation function.
Original NVD description (English source)
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlpFreeHeap+0x00000000000003ca."