CVE-2017-9920
HighSummary
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
Risk Assessment
This vulnerability could lead to significant disruptions in system operation and allow attackers to gain control over the system.
Recommendation
It is recommended to update IrfanView and the TOOLS Plugin to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką TOOLS 4.50
See all- CVE-2017-9923High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9922High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9921High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9919High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to Branch Selection control at the faulting address.
- CVE-2017-9918High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9917High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
- CVE-2017-9916High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
- CVE-2017-9915High
IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a 'Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033.'
Original NVD description (English source)
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."