CVE-2017-14578
HighSummary
IrfanView 4.44 - 32bit contains a vulnerability that allows attackers to cause a denial of service or potentially have unspecified other impact via a crafted .ani file. The issue relates to branch selection in the RtlpCoalesceFreeBlocks function.
Risk Assessment
This vulnerability may lead to application crashes, affecting service availability for users. It may also pose other unspecified risks to the system.
Recommendation
It is recommended to update IrfanView to the latest version to mitigate the risks associated with this vulnerability. Additionally, avoid opening unknown .ani files.
Other vulnerabilities in IrfanView 4.44 - 32bit
See all- CVE-2017-14693High
IrfanView version 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file. The issue relates to branch selection control associated with the DJVU!GetPlugInInfo function.
- CVE-2017-14540High
IrfanView version 4.44 for 32-bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
- CVE-2017-14539High
IrfanView version 4.44 for 32-bit systems allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
Original NVD description (English source)
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4."