CVE-2017-15737

High

Published: 22/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 is vulnerable to attacks that may lead to denial of service or other unspecified impacts via a crafted .dwg file. The issue relates to a Read Access Violation at address CADIMAGE+0x00000000003d246f.

Risk Assessment

An attacker could exploit this vulnerability to disrupt the application's operation, potentially leading to downtime for the organization. Possible consequences may include loss of availability of services related to processing .dwg files.

Recommendation

It is recommended to update IrfanView and the CADImage plugin to the latest versions to minimize the risk associated with this vulnerability. Additionally, avoid opening unknown or suspicious .dwg files.

Other vulnerabilities in IrfanView 4.50 - 64bit z wtyczką CADImage 12.0.0.5

CVE-2017-15738High
IrfanView version 4.50 - 64bit with CADImage plugin version 12.0.0.5 is vulnerable to attacks that can lead to denial of service or other unspecified impacts via a crafted .dwg file. The issue relates to a memory access violation.

Original NVD description (English source)

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d246f."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS