CVE-2017-15252

High

Published: 11/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file. The issue is related to a Read Access Violation on Block Data Move.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update IrfanView and the PDF plugin to the latest versions to minimize the risk associated with this vulnerability.

Other vulnerabilities in IrfanView 4.44 (32-bit) z wtyczką PDF 4.43

CVE-2017-15242High
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file.

Original NVD description (English source)

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x00000000000158cb."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS