CVE-2017-9922
HighSummary
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
Risk Assessment
This vulnerability could lead to significant disruptions in system operation or allow attackers to gain control over the system.
Recommendation
It is recommended to update IrfanView to the latest version and remove the TOOLS plugin if it is not necessary.
Other vulnerabilities in IrfanView 4.44 (32bit) z wtyczką TOOLS 4.50
See all- CVE-2017-9923High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9921High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9920High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9919High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file. The issue relates to Branch Selection control at the faulting address.
- CVE-2017-9918High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 may allow attackers to cause a denial of service or execute arbitrary code via a crafted file.
- CVE-2017-9917High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
- CVE-2017-9916High
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file.
- CVE-2017-9915High
IrfanView version 4.44 (32bit) with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a 'Read Access Violation on Block Data Move starting at ntdll_77df0000!memcpy+0x0000000000000033.'
Original NVD description (English source)
IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!LdrpCompareResourceNames_U+0x0000000000000062."