Code injection

IrfanView version 4.44 32bit with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x0000000000048d0c."...

CVE-2017-15258

CVE-2017-15258 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43, where a crafted PDF can trigger a Read Access Violation in PDF!xmlParserInputRead, leading to denial of service and potentially other impact. The original advisory ties the issue to IrfanView’s PDF handling. Mitigation provided ...

CVE-2017-15256

CVE-2017-15256 affects IrfanView 4.44 (32-bit) with PDF plugin 4.43. A crafted PDF can cause a denial of service (and potentially other impact) due to a faulting address handling issue in PDF parsing (PDF!xmlListWalk+0x…); idle exploitation details indicate local conditions and potential code exe...

CVE-2017-14693

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."...

CVE-2017-14693

CVE-2017-14693 affects IrfanView 4.44 (32‑bit). A crafted .djvu file can trigger a vulnerability in DJVU!GetPlugInInfo+0x... leading to a denial of service and possibly other impact. Some sources mention in-the-wild malware exploitation. Remediation: update IrfanView to the latest version. Techni...

CVE-2017-14539

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x000000000011d767."...

Design/Logic Flaw

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x000000000011d767."...

CVE-2017-14539

CVE-2017-14539 affects IrfanView 4.44 (32-bit) via the SVG parsing path. Public documents describe DoS outcomes from crafting SVG files, with the underlying issue described as Data from Faulting Address controls Branch Selection leading to potential memory/process impact. Several sources (OpenVAS...

CVE-2017-14539

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at image0000000000400000+0x000000000011d767."...

AudioCoder 0.8.46 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title : AudioCoder 0.8.46 Local Buffer Overflow SEH CVE : CVE-2017-8870 Exploit Author : Muhann4d @0xSecured Vendor Homepage : http://www.mediacoderhq.com Vulnerable Software:...

CVE-2017-9920

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."...

CVE-2017-9891

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-9530

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-8369

IrfanView version 4.44 32bit has a "Data from Faulting Address controls Branch Selection starting at USER32!wvsprintfA+0x00000000000002f3" issue, which might allow attackers to execute arbitrary code via a crafted file...

CVE-2017-10730

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d96."...

Code injection

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589."...

Design/Logic Flaw

IrfanView version 4.44 32bit allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV starting at ntdll77df0000!RtlpWaitOnCriticalSection+0x0000000000000121."...

Design/Logic Flaw

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpAllocateHeap+0x0000000000000429."...

CVE-2017-10734

IrfanView version 4.44 32bit might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to an "Invalid Handle starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216."...