CVE-2017-15755

High

Published: 22/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.

Risk Assessment

The organization may be exposed to attacks that lead to service outages related to IrfanView, potentially impacting business operations.

Recommendation

It is recommended to update IrfanView and the BabaCAD4Image plugin to the latest versions to minimize the risk associated with this vulnerability.

Other vulnerabilities in IrfanView 4.50 - 64bit z wtyczką BabaCAD4Image 1.3

CVE-2017-15766High
IrfanView version 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file.

Original NVD description (English source)

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS