PT-2017-14198

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at...

PT-2017-14175

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow" error...

PT-2017-14178

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation" error. This...

CVE-2017-15747: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at Unknown Symbol @ 0x0000700b00260112 called from CADIMAGE+0x00000000003d35ad."...

CVE-2017-15743: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0."...

CVE-2017-15742: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."...

CVE-2017-15745: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e."...

CVE-2017-15738: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."...

CVE-2017-15748: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a."...

CVE-2017-15741: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."...

CVE-2017-15739: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at CADIMAGE+0x00000000000042d5."...

CVE-2017-15767: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."...

PT-2017-14177

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file. This is related to "Data from Faulting Address...

CVE-2017-15765: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...