37 matches found
Design/Logic Flaw
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2."...
Design/Logic Flaw
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000007822."...
Design/Logic Flaw
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c99a."...
CVE-2017-9532
CVE-2017-9532 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV/buffer overflow, leading to arbitrary code execution or denial of service. Public reports describe multiple FPX-related and related-plugin vulnerabilities in IrfanView 4.44. Rem...
CVE-2017-9534
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426."...
CVE-2017-9873
CVE-2017-9873 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.46. A crafted FPX (.fpx) file can trigger a Read Access Violation on control flow (FPX!GetPlugInInfo+0x…), enabling arbitrary code execution or a denial of service. Root cause involves FPX plugin processing of FPX files leading to me...
CVE-2017-9536
CVE-2017-9536 concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability arises when processing specially crafted .fpx files, related to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can lead to arbitrary code execution or a Denial of Service. Conn...
CVE-2017-9881
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014e7."...
CVE-2017-9874
Summary (CVE-2017-9874) IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a buffer/write‑type vulnerability that can lead to arbitrary code execution or denial of service when processing a crafted .fpx file. The issue is tied to a User Mode Write AV originating from FPX_GetScanDevicePropertyG...
CVE-2017-9531
CVE-2017-9531 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a user‑mode write/overflow, leading to arbitrary code execution or a denial of service. Connected sources corroborate a FPX‑related buffer/AV condition in multiple advisories (CNVD-2017-14128; Kaspe...
CVE-2017-9879
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...
CVE-2017-9885
CVE-2017-9885 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file can trigger memory corruption in FPX_GetScanDevicePropertyGroup, with the vulnerability described as leading to a denial of service or possibly other impact (e.g., arbitrary code execution) per connected sourc...
CVE-2017-9535
The CVE-2017-9535 entry affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX-related code paths (notably FPX_GetPlugInInfo+0x...), leading to arbitrary code execution or DoS. Connected advisories confirm multiple FPX-related buffer overf...
CVE-2017-9885
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...
CVE-2017-9879
IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by CVE-2017-9879. A crafted FPX file can cause arbitrary code execution or a denial of service due to a faulting address write vulnerability in FPX_GetScanDevicePropertyGroup. This is supported by NVD/CNVD advisories and related risk notes,...
PT-2017-19247 · Microsoft +1 · Ntdll +2
Name of the Vulnerable Software and Affected Versions: IrfanView version 4.44 32bit with FPX Plugin 4.46 Description: The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls...
University of Washington pop2d 4.46/4.51/4.54/4.55 Remote File Read Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap package are affected. Any user who ha...