CVE-2017-15738

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."...

CVE-2017-15737

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d246f."...

CVE-2017-15741

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."...

CVE-2017-15743

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0."...

CVE-2017-15767

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."...

CVE-2017-15774

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls Code Flow starting at CADImage+0x0000000000221a9a."...

CVE-2017-15740

CVE-2017-15740 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A buffer/flow control issue allows arbitrary code execution or denial of service when processing a specially crafted .dwg file, related to Data from Faulting Address controls Code Flow at CADIMAGE+0x000000000033228e...

CVE-2017-15743

CVE-2017-15743 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted .dwg file can cause a denial of service and possibly other impact due to a faulting address being used as a return value in CADIMAGE+0x3d24a0. Verified vendor reports and security pages identify the vulner...

CVE-2017-15749

CVE-2017-15749 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. The connected sources describe a vulnerability in the CADImage plugin that allows a crafted .dwg file to cause a denial of service (and possibly other impacts). The underlying issue is evidenced by references to Dat...

CVE-2017-15737

IrfanView 4.50 64-bit with CADImage plugin 12.0.0.5 is vulnerable to denial of service and possibly other impact when processing specially crafted .dwg files, due to a Read Access Violation in CADIMAGE. The issue is triggered by a crafted CAD file and is associated with IrfanView’s CADImage handl...

CVE-2017-15776

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1."...

CVE-2017-15747

CVE-2017-15747 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a Data Execution Prevention Violation and may allow arbitrary code execution or cause a denial of service. The connected SUSE/CVE and CNVD entries confirm the same affected product an...

CVE-2017-14541

XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e."...