CVE-2017-9915
HighSummary
IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a 'Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033.'
Risk Assessment
This vulnerability can lead to serious consequences, including system takeover or disruption of service, posing a threat to data integrity and availability.
Recommendation
It is recommended to update IrfanView and the TOOLS plugin to the latest versions to minimize the risk associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką TOOLS 4.50
See all- CVE-2017-9923High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9922High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9921High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9920High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9919High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to Branch Selection control at the faulting address.
- CVE-2017-9918High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9917High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
- CVE-2017-9916High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
Original NVD description (English source)
IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033."