CVE-2017-15760

CVE-2017-15760 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. A vulnerability in the BabaCAD4Image component (associated with reading DWG files) can allow an attacker to cause arbitrary code execution or a denial of service when processing a specially crafted .dwg file. Multip...

CVE-2017-15742

IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15742. A crafted .dwg file can cause a denial of service and may have other unspecified impacts due to a Read Access Violation in CADIMAGE+0x00000000003d2328. Remediation: update IrfanView to the latest version (as per ...

CVE-2017-15759

CVE-2017-15759 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin (v1.3). The vulnerability arises from a buffer overflow in the BabaCAD4Image plugin when processing DWG files, which can lead to arbitrary code execution or a denial of service upon opening a crafted .dwg file. Affected ...

CVE-2017-15762

CVE-2017-15762 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. A buffer overflow in BabaCAD4Image linked to crafting a .dwg file can allow an attacker to execute arbitrary code or cause a denial of service. The vulnerability is triggered via a crafted .dwg and is described as b...

CVE-2017-15787

XnView Classic for Windows Version 2.43 is affected by a vulnerability in handling .dwg files that can lead to arbitrary code execution or denial of service. Multiple sources (SUSE, CNVD, NVD) describe a buffer/stack-related issue linked to a Data Execution Prevention Violation (starting at xnvie...

CVE-2017-15786

CVE-2017-15786 affects XnView Classic for Windows 2.43. A crafted .dwg file can cause a denial of service or possibly other impact due to a Read Access Violation starting at CADImage+0x00000000001a78db. Connected documents confirm the product/version and the impact, but do not provide a patch ver...

CVE-2017-15767

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."...

CVE-2017-15766

CVE-2017-15766 concerns IrfanView 4.50 (64‑bit) when using the BabaCAD4Image plugin v1.3. Multiple connected sources describe a buffer/related overflow in the BabaCAD4Image component triggered by crafted .dwg files, enabling denial of service and potentially other unspecified impact on the vulner...

CVE-2017-15761

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ecaa."...

CVE-2017-15747

CVE-2017-15747 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a Data Execution Prevention Violation and may allow arbitrary code execution or cause a denial of service. The connected SUSE/CVE and CNVD entries confirm the same affected product an...

CVE-2017-15737

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d246f."...

CVE-2017-15754

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000013968."...

CVE-2017-15744

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7."...

CVE-2017-15785

CVE-2017-15785 affects XnView Classic for Windows 2.43. A crafted .dwg file can trigger a Data Execution Prevention violation near NULL, called from CADImage+0x0000000000286a79, potentially allowing arbitrary code execution or a denial of service. The provided documents do not specify the root ca...

CVE-2017-15772

CVE-2017-15772 affects XnView Classic for Windows 2.43. The issue arises while handling .dwg files, described as Data from Faulting Address may be used as a return value starting at CADImage+0x0000000000285e9d, leading to a denial of service and potentially other unspecified impact. The connected...

CVE-2017-15752

IrfanView 4.50 (64‑bit) with BabaCAD4Image plugin 1.3 is affected by a buffer overflow in the BabaCAD4Image plugin when handling .dwg files, which can enable arbitrary code execution or a denial of service. The issue is tied to data from a faulting address influencing a subsequent write address, ...

CVE-2017-15751

CVE-2017-15751 affects IrfanView 4.50 (64-bit) with BabaCAD4Image plugin 1.3. A crafted .dwg file can trigger a Read Access Violation in BabaCAD4Image, leading to Denial of Service and potentially other impact. Public sources in the connected data confirm the vulnerability is local/DoS-prone and ...

CVE-2017-15738

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d22d8."...

CVE-2017-15748

CVE-2017-15748 affects IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a vulnerability in CADImage (related to User Mode Write AV at CADIMAGE+0x613a) enabling arbitrary code execution or a denial of service. Exploitation is described as local (no authenticat...

CVE-2017-15746

CVE-2017-15746 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted DWG file can trigger a denial of service and possibly other impact due to a faulting address control in CADIMAGE (starting at CADIMAGE+0x3d21b3). Connected sources corroborate a DoS/remote impact scenario ...