Code injection

2017-07-0520:29:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to “Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216.”

CPENameOperatorVersion
fpxeq4.46
irfanvieweq4.44

CPE	Name	Operator	Version
	fpx	eq	4.46
	irfanview	eq	4.44

References

www.irfanview.com/plugins.htm

github.com/wlinzi/security_advisories/tree/master/CVE-2017-9883