CVE-2017-9916
HighSummary
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
Risk Assessment
This vulnerability may lead to service downtime, affecting organizational operations and user trust.
Recommendation
It is recommended to update IrfanView to the latest version and monitor files uploaded to the application to minimize risk.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką TOOLS 4.50
See all- CVE-2017-9923High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9922High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9921High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9920High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9919High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to Branch Selection control at the faulting address.
- CVE-2017-9918High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9917High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
- CVE-2017-9915High
IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a 'Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033.'
Original NVD description (English source)
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!RtlFreeHandle+0x00000000000001b6."