CVE-2017-9528
HighSummary
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a User Mode Write AV concerning the FPX_GetScanDevicePropertyGroup function.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update IrfanView and the FPX plugin to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką FPX 4.46
See all- CVE-2017-9891High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9890High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a 'Read Access Violation starting at FPX+0x000000000000153a.'
- CVE-2017-9888High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9887High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9886High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9885High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9882High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Block Data Move.
- CVE-2017-9881High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
- CVE-2017-9879High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to faulting address control affecting subsequent write addresses.
- CVE-2017-9878High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Control Flow.
Original NVD description (English source)
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000000f53."