CVE-2017-15750
HighSummary
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 is vulnerable to an attack that can lead to denial of service or other unspecified impacts via a crafted .dwg file. The issue relates to a read access violation when invoking plugin options.
Risk Assessment
Attackers may exploit this vulnerability to disrupt application functionality, potentially leading to downtime for the organization. Additionally, there is a risk of unspecified impacts that could affect data security.
Recommendation
It is recommended to update IrfanView and the BabaCAD4Image plugin to the latest versions to minimize the risk associated with this vulnerability. Monitoring and restricting the opening of .dwg files from unknown sources is also advised.
Other vulnerabilities in IrfanView 4.50 - 64bit, BabaCAD4Image plugin version 1.3
See all- CVE-2017-15764High
IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.
- CVE-2017-15763High
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. The issue relates to faulting address control affecting subsequent write addresses.
- CVE-2017-15762High
IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
- CVE-2017-15761High
IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
- CVE-2017-15760High
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
- CVE-2017-15759High
IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
- CVE-2017-15758High
IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
- CVE-2017-15757High
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.
- CVE-2017-15756High
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
- CVE-2017-15754High
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file.
Original NVD description (English source)
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0."