Design/Logic Flaw

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at...

CVE-2017-15780

XnView Classic for Windows 2.43 is affected by a vulnerability in handling .dwg files, due to a Read Access Violation in CADImage. This can lead to denial of service and possibly other unspecified impact. Affected component/file: DWG handling path within XnView Classic for Windows; root cause des...

CVE-2017-15782

CVE-2017-15782 affects XnView Classic for Windows, version 2.43. A crafted ".dwg" file may allow an attacker to execute arbitrary code or cause a denial of service, tied to a memory-write issue described as a "User Mode Write AV starting at CADImage+0x00000000000032eb". The connected documents co...

CVE-2017-15764

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001e6b0."...

CVE-2017-15749

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000000348b9."...

CVE-2017-15784

CVE-2017-15784 affects XnView Classic for Windows (Version 2.43). The vulnerability is a buffer overflow triggered by processing a crafted .dwg file, leading to possible arbitrary code execution or denial of service, described as an “Illegal Instruction Violation starting at xnview+0x000000000037...

CVE-2017-15776

XnView Classic for Windows, version 2.43, is affected. A crafted .dwg file can trigger a denial of service and possibly other impact due to a vulnerability described as Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285ec1. The issue is associated with X...

CVE-2017-15760

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ce82."...

CVE-2017-15781

XnView Classic for Windows v2.43 is affected by a vulnerability in the handling of .dwg files, leading to arbitrary code execution or denial of service. The issue is described as a Read Access Violation in control flow starting at CADImage+0x286a76, with exploitation via a crafted .dwg file. Mult...

CVE-2017-15762

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b."...

CVE-2017-15763

CVE-2017-15763 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. A crafted .dwg file can cause arbitrary code execution or a denial of service via the BabaCAD4Image!ShowPlugInOptions+0x… control flow. Exploitation is local and can require user interaction. Mitigation: update to t...

CVE-2017-15755

CVE-2017-15755 affects IrfanView 4.50 (64‑bit) with the BabaCAD4Image plugin v1.3. The vulnerability allows a crafted .dwg file to cause a denial of service and potentially other unspecified impact, tied to a faulting address handling in verifier!AVrfpDphFindBusyMemoryNoCheck+0x91. The issue is l...

CVE-2017-15774

CVE-2017-15774 affects XnView Classic for Windows version 2.43. A vulnerability exists in handling a crafted .dwg file that can lead to arbitrary code execution or denial of service . The root cause is described as “Data from Faulting Address controls Code Flow starting at CADImage+0x000000000022...

CVE-2017-15789

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."...

CVE-2017-15761

CVE-2017-15761 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. The vulnerability is a buffer overflow in the BabaCAD4Image plugin when handling DWG/DXF content, triggered by a crafted .dwg file, which can lead to arbitrary code execution or a denial of service. Affected compone...

CVE-2017-15789

XnView Classic for Windows 2.43 is affected by a vulnerability in handling .dwg files (buffer overflow/root cause described as a User Mode Write AV starting at CADImage+0x00000000000048e7). Exploitation could lead to arbitrary code execution or a denial of service, as reported by multiple sources...

CVE-2017-15760

CVE-2017-15760 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. A vulnerability in the BabaCAD4Image component (associated with reading DWG files) can allow an attacker to cause arbitrary code execution or a denial of service when processing a specially crafted .dwg file. Multip...

CVE-2017-15742

IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15742. A crafted .dwg file can cause a denial of service and may have other unspecified impacts due to a Read Access Violation in CADIMAGE+0x00000000003d2328. Remediation: update IrfanView to the latest version (as per ...

CVE-2017-15759

CVE-2017-15759 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin (v1.3). The vulnerability arises from a buffer overflow in the BabaCAD4Image plugin when processing DWG files, which can lead to arbitrary code execution or a denial of service upon opening a crafted .dwg file. Affected ...

CVE-2017-15762

CVE-2017-15762 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. A buffer overflow in BabaCAD4Image linked to crafting a .dwg file can allow an attacker to execute arbitrary code or cause a denial of service. The vulnerability is triggered via a crafted .dwg and is described as b...