CVE-2017-9530
HighSummary
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to the use of data from a faulting address as arguments in subsequent function calls.
Risk Assessment
The organization may be exposed to attacks that could lead to system downtime or unauthorized code execution, potentially resulting in data loss or security breaches.
Recommendation
It is recommended to update IrfanView to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32-bit)
See all- CVE-2017-10735High
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue is related to branch selection control concerning the faulting address.
- CVE-2017-10733High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to branch selection control in ntdll.
- CVE-2017-10732High
IrfanView version 4.44 (32-bit) may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file. The issue relates to branch selection control in the memory allocation function.
Original NVD description (English source)
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000150."