CVE-2017-15242

High

Published: 11/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file.

Risk Assessment

This vulnerability can lead to serious consequences, including system takeover or disruption of service.

Recommendation

It is recommended to update IrfanView and the PDF plugin to the latest versions to minimize the risk associated with this vulnerability.

Other vulnerabilities in IrfanView 4.44 (32-bit) z wtyczką PDF 4.43

CVE-2017-15252High
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file. The issue is related to a Read Access Violation on Block Data Move.

Original NVD description (English source)

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "User Mode Write AV starting at PDF!xmlGetGlobalState+0x0000000000031abe."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS