CVE-2017-9891

Summary of the CVE-2017-9891 details (IrfanView FPX plugin) Affected product: IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. Root cause/technical detail: A vulnerability in the FPX handling path is triggered by a specially crafted .fpx file. According to the sources, data from a faulting address i...

CVE-2017-9923

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589."...

CVE-2017-9535

The CVE-2017-9535 entry affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX-related code paths (notably FPX_GetPlugInInfo+0x...), leading to arbitrary code execution or DoS. Connected advisories confirm multiple FPX-related buffer overf...

CVE-2017-8369

CVE-2017-8369 affects IrfanView 4.44 (32-bit). The vulnerability arises from a Data from Faulting Address that controls branch selection during image viewing/thumbnailing (USER32!wvsprintfA+0x...); this can allow arbitrary code execution via a crafted file. Exploitation is noted as malware exists...

CVE-2017-9885

CVE-2017-9885 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file can trigger memory corruption in FPX_GetScanDevicePropertyGroup, with the vulnerability described as leading to a denial of service or possibly other impact (e.g., arbitrary code execution) per connected sourc...

CVE-2017-9885

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

PT-2017-19247 · Microsoft +1 · Ntdll +2

Name of the Vulnerable Software and Affected Versions: IrfanView version 4.44 32bit with FPX Plugin 4.46 Description: The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls...

IrfanView Integer Overflow Vulnerability

IrfanView is an image viewer developed by Irfan Skiljan, a software developer in Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. An integer overflow vulnerability exists in IrfanView version 4.44. An attacker can exploit this vulnerability t...

CVE-2017-7721

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

Exim vulnerable to buffer overflow via the dns_build_reverse() routine

Overview The Exim Mail Transfer Agent MTA contains a buffer overflow that allows a local attacker to execute arbitrary code. Description Exim MTA is an open-source mail transport agent distributed by the University of Cambridge. A lack of input validation on user supplied data may allow a buffer...

Remote pine Denial of Service

Security Advisory 23rd October 2002 Remote pine version 4.44 denial of service Name: Pine version 4.44 Arch: Redhat 7.2 i386 Severity: Medium Vendor URL: http://www.washington.edu/pine/ Author: Linus Sjberg [email protected] Vendor notified: 14:th October 2002 Vendor response: 14:th October 2002...

Denial of Service bug in Pine 4.44

Hi, while using pine I found a small bug which causes pine to crash. When opening a MIME encoded mail with a blank boundary, pine will crash. The header looks like this: ... Content-Type: multipart/mixed; boundary="" Mime-Version: 1.0 ... This is no dangerous bug and you can simply delete the...