CVE-2017-14693
HighSummary
IrfanView version 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file. The issue relates to branch selection control associated with the DJVU!GetPlugInInfo function.
Risk Assessment
The organization may experience service outages or other unforeseen security issues, potentially leading to data loss or operational disruptions.
Recommendation
It is recommended to update IrfanView to the latest version and to monitor and restrict opening .djvu files from unknown sources.
Other vulnerabilities in IrfanView 4.44 - 32bit
See all- CVE-2017-14578High
IrfanView 4.44 - 32bit contains a vulnerability that allows attackers to cause a denial of service or potentially have unspecified other impact via a crafted .ani file. The issue relates to branch selection in the RtlpCoalesceFreeBlocks function.
- CVE-2017-14540High
IrfanView version 4.44 for 32-bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
- CVE-2017-14539High
IrfanView version 4.44 for 32-bit systems allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file.
Original NVD description (English source)
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."