CVE-2017-15746

CVE-2017-15746 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted DWG file can trigger a denial of service and possibly other impact due to a faulting address control in CADIMAGE (starting at CADIMAGE+0x3d21b3). Connected sources corroborate a DoS/remote impact scenario ...

CVE-2017-15747

CVE-2017-15747 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a Data Execution Prevention Violation and may allow arbitrary code execution or cause a denial of service. The connected SUSE/CVE and CNVD entries confirm the same affected product an...

CVE-2017-15748

CVE-2017-15748 affects IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a vulnerability in CADImage (related to User Mode Write AV at CADIMAGE+0x613a) enabling arbitrary code execution or a denial of service. Exploitation is described as local (no authenticat...

CVE-2017-15749

CVE-2017-15749 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. The connected sources describe a vulnerability in the CADImage plugin that allows a crafted .dwg file to cause a denial of service (and possibly other impacts). The underlying issue is evidenced by references to Dat...

CVE-2017-15765

IrfanView 4.50 (64‑bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15765. The issue arises when processing a crafted .dwg file, with the faulting address data used as arguments in a subsequent CADIMAGE function call (CADIMAGE+0x00000000003e9462), leading to a denial of service and pote...

CVE-2017-15767

IrfanView 4.50 64-bit with CADImage plugin 12.0.0.5 is affected by CVE-2017-15767. The vulnerability allows arbitrary code execution or a denial of service via a crafted .dwg file, linked to a User Mode Write AV near NULL at CADIMAGE+0x00000000003d5b52. Affected component is the CADImage plugin w...

CVE-2017-15788: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x0000000000002d83."...

CVE-2017-15789: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."...

CVE-2017-15786: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x00000000001a78db."...

CVE-2017-15785: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation near NULL starting at Unknown Symbol @ 0x0000000000000000 called from CADImage+0x0000000000286a79."...

CVE-2017-15783: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000285ce1."...

CVE-2017-15782: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000032eb."...

CVE-2017-15781: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADImage+0x0000000000286a76."...

CVE-2017-15780: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285dad."...

CVE-2017-15778: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."...

CVE-2017-15777: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."...

CVE-2017-15776: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."...

CVE-2017-15775: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x0000000000259aa4."...

CVE-2017-15774: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."...

CVE-2017-15773: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285d79."...