CVE-2017-15745

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."...

CVE-2017-15746

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3."...

CVE-2017-15747

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad."...

CVE-2017-15748

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a."...

CVE-2017-15749

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9."...

CVE-2017-15765

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-15774

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."...

CVE-2017-15789

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."...

CVE-2017-15739

CVE-2017-15739 affects IrfanView 4.50 (64‑bit) with CADImage plugin 12.0.0.5. A crafted .dwg file can cause arbitrary code execution or denial of service due to a faulting address that controls the subsequent Write Address in CADIMAGE+0x42d5. Root cause is memory corruption in CADImage. Remediati...

CVE-2017-15740

CVE-2017-15740 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A buffer/flow control issue allows arbitrary code execution or denial of service when processing a specially crafted .dwg file, related to Data from Faulting Address controls Code Flow at CADIMAGE+0x000000000033228e...

CVE-2017-15741

CVE-2017-15741 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5 and can be triggered by a crafted .dwg file to cause a denial of service and possibly other impacts, related to a stack corruption at CADIMAGE+0x3d2378. Connected sources (SUSE, CNVD, NVD, OpenVAS context) confirm th...

CVE-2017-15742

IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15742. A crafted .dwg file can cause a denial of service and may have other unspecified impacts due to a Read Access Violation in CADIMAGE+0x00000000003d2328. Remediation: update IrfanView to the latest version (as per ...

CVE-2017-15743

CVE-2017-15743 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted .dwg file can cause a denial of service and possibly other impact due to a faulting address being used as a return value in CADIMAGE+0x3d24a0. Verified vendor reports and security pages identify the vulner...

CVE-2017-15744

IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5 is affected by a vulnerability in the CADImage component that can be triggered by a specially crafted .dwg file, leading to arbitrary code execution or a denial of service. The issue is described as a Read Access Violation on Control Flow ...

CVE-2017-15746

CVE-2017-15746 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted DWG file can trigger a denial of service and possibly other impact due to a faulting address control in CADIMAGE (starting at CADIMAGE+0x3d21b3). Connected sources corroborate a DoS/remote impact scenario ...

CVE-2017-15747

CVE-2017-15747 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a Data Execution Prevention Violation and may allow arbitrary code execution or cause a denial of service. The connected SUSE/CVE and CNVD entries confirm the same affected product an...

CVE-2017-15748

CVE-2017-15748 affects IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a vulnerability in CADImage (related to User Mode Write AV at CADIMAGE+0x613a) enabling arbitrary code execution or a denial of service. Exploitation is described as local (no authenticat...

CVE-2017-15749

CVE-2017-15749 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. The connected sources describe a vulnerability in the CADImage plugin that allows a crafted .dwg file to cause a denial of service (and possibly other impacts). The underlying issue is evidenced by references to Dat...

CVE-2017-15765

IrfanView 4.50 (64‑bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15765. The issue arises when processing a crafted .dwg file, with the faulting address data used as arguments in a subsequent CADIMAGE function call (CADIMAGE+0x00000000003e9462), leading to a denial of service and pote...

CVE-2017-15767

IrfanView 4.50 64-bit with CADImage plugin 12.0.0.5 is affected by CVE-2017-15767. The vulnerability allows arbitrary code execution or a denial of service via a crafted .dwg file, linked to a User Mode Write AV near NULL at CADIMAGE+0x00000000003d5b52. Affected component is the CADImage plugin w...