CVE-2017-15738

High

Published: 22/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IrfanView version 4.50 - 64bit with CADImage plugin version 12.0.0.5 is vulnerable to attacks that can lead to denial of service or other unspecified impacts via a crafted .dwg file. The issue relates to a memory access violation.

Risk Assessment

An attacker could exploit this vulnerability to disrupt the application's operation, potentially leading to downtime for the organization. Possible consequences may include data loss or other unforeseen issues.

Recommendation

It is recommended to update IrfanView and the CADImage plugin to the latest versions to mitigate the risks associated with this vulnerability.

Other vulnerabilities in IrfanView 4.50 - 64bit z wtyczką CADImage 12.0.0.5

CVE-2017-15737High
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 is vulnerable to attacks that may lead to denial of service or other unspecified impacts via a crafted .dwg file. The issue relates to a Read Access Violation at address CADIMAGE+0x00000000003d246f.

Original NVD description (English source)

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS