CVE-2017-9879
HighSummary
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to faulting address control affecting subsequent write addresses.
Risk Assessment
This vulnerability could lead to serious consequences, such as unauthorized code execution or service interruptions, posing a threat to the organization's data security.
Recommendation
It is recommended to update IrfanView and the FPX plugin to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką FPX 4.46
See all- CVE-2017-9891High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9890High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a 'Read Access Violation starting at FPX+0x000000000000153a.'
- CVE-2017-9888High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9887High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9886High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9885High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9882High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Block Data Move.
- CVE-2017-9881High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
- CVE-2017-9878High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Control Flow.
- CVE-2017-9877High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
Original NVD description (English source)
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPX_GetScanDevicePropertyGroup+0x000000000000a525."