CVE-2017-9890
HighSummary
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a 'Read Access Violation starting at FPX+0x000000000000153a.'
Risk Assessment
Organizations may be exposed to attacks that lead to denial of service, potentially disrupting normal operations of systems and services.
Recommendation
It is recommended to update IrfanView and the FPX plugin to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką FPX 4.46
See all- CVE-2017-9891High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9888High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9887High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9886High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9885High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file.
- CVE-2017-9882High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Block Data Move.
- CVE-2017-9881High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
- CVE-2017-9879High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to faulting address control affecting subsequent write addresses.
- CVE-2017-9878High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue is related to a Read Access Violation on Control Flow.
- CVE-2017-9877High
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. The issue relates to code flow control associated with a faulting address.
Original NVD description (English source)
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x000000000000153a."