CVE-2017-14540
HighSummary
IrfanView version 4.44 for 32-bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
Risk Assessment
This vulnerability may lead to application crashes, affecting service availability for users.
Recommendation
It is recommended to update IrfanView to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 - 32bit
See all- CVE-2017-14693High
IrfanView version 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file. The issue relates to branch selection control associated with the DJVU!GetPlugInInfo function.
- CVE-2017-14578High
IrfanView 4.44 - 32bit contains a vulnerability that allows attackers to cause a denial of service or potentially have unspecified other impact via a crafted .ani file. The issue relates to branch selection in the RtlpCoalesceFreeBlocks function.
- CVE-2017-14539High
IrfanView version 4.44 for 32-bit systems allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
Original NVD description (English source)
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e."