CVE-2017-9878
HighSummary
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Control Flow.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system or its destabilization, posing a serious security threat to the organization.
Recommendation
It is recommended to update IrfanView and the FPX plugin to the latest versions to minimize the risk associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką FPX 4.46
See all- CVE-2017-9891High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9890High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a 'Read Access Violation starting at FPX+0x000000000000153a.'
- CVE-2017-9888High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9887High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9886High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9885High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9882High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Block Data Move.
- CVE-2017-9881High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
- CVE-2017-9879High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to faulting address control affecting subsequent write addresses.
- CVE-2017-9877High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
Original NVD description (English source)
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000c99a."