CVE-2017-15742

IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15742. A crafted .dwg file can cause a denial of service and may have other unspecified impacts due to a Read Access Violation in CADIMAGE+0x00000000003d2328. Remediation: update IrfanView to the latest version (as per ...

CVE-2017-15785

CVE-2017-15785 affects XnView Classic for Windows 2.43. A crafted .dwg file can trigger a Data Execution Prevention violation near NULL, called from CADImage+0x0000000000286a79, potentially allowing arbitrary code execution or a denial of service. The provided documents do not specify the root ca...

CVE-2017-15789

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x00000000000048e7."...

CVE-2017-15754

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000013968."...

CVE-2017-15760

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001ce82."...

CVE-2017-15777

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADImage+0x0000000000288750."...

CVE-2017-15784

XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal Instruction Violation starting at xnview+0x0000000000370074."...

CVE-2017-15748

CVE-2017-15748 affects IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a vulnerability in CADImage (related to User Mode Write AV at CADIMAGE+0x613a) enabling arbitrary code execution or a denial of service. Exploitation is described as local (no authenticat...

CVE-2017-15751

CVE-2017-15751 affects IrfanView 4.50 (64-bit) with BabaCAD4Image plugin 1.3. A crafted .dwg file can trigger a Read Access Violation in BabaCAD4Image, leading to Denial of Service and potentially other impact. Public sources in the connected data confirm the vulnerability is local/DoS-prone and ...

CVE-2017-15755

CVE-2017-15755 affects IrfanView 4.50 (64‑bit) with the BabaCAD4Image plugin v1.3. The vulnerability allows a crafted .dwg file to cause a denial of service and potentially other unspecified impact, tied to a faulting address handling in verifier!AVrfpDphFindBusyMemoryNoCheck+0x91. The issue is l...

CVE-2017-15789

XnView Classic for Windows 2.43 is affected by a vulnerability in handling .dwg files (buffer overflow/root cause described as a User Mode Write AV starting at CADImage+0x00000000000048e7). Exploitation could lead to arbitrary code execution or a denial of service, as reported by multiple sources...

CVE-2017-15761

CVE-2017-15761 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3. The vulnerability is a buffer overflow in the BabaCAD4Image plugin when handling DWG/DXF content, triggered by a crafted .dwg file, which can lead to arbitrary code execution or a denial of service. Affected compone...

CVE-2017-15753

CVE-2017-15753 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin v1.3. A buffer overflow in BabaCAD4Image (ShowPlugInOptions+0x29c2) can be triggered by a crafted .dwg file, leading to DoS and potentially other impact. Affected product: IrfanView with BabaCAD4Image plugin 1.3; root ca...

CVE-2017-15778

XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADImage+0x0000000000285de7."...

CVE-2017-15766

CVE-2017-15766 concerns IrfanView 4.50 (64‑bit) when using the BabaCAD4Image plugin v1.3. Multiple connected sources describe a buffer/related overflow in the BabaCAD4Image component triggered by crafted .dwg files, enabling denial of service and potentially other unspecified impact on the vulner...

CVE-2017-15787

XnView Classic for Windows Version 2.43 is affected by a vulnerability in handling .dwg files that can lead to arbitrary code execution or denial of service. Multiple sources (SUSE, CNVD, NVD) describe a buffer/stack-related issue linked to a Data Execution Prevention Violation (starting at xnvie...

CVE-2017-15755

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at...

CVE-2017-15767

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at CADIMAGE+0x00000000003d5b52."...

CVE-2017-15746

CVE-2017-15746 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted DWG file can trigger a denial of service and possibly other impact due to a faulting address control in CADIMAGE (starting at CADIMAGE+0x3d21b3). Connected sources corroborate a DoS/remote impact scenario ...

CVE-2017-15759

CVE-2017-15759 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin (v1.3). The vulnerability arises from a buffer overflow in the BabaCAD4Image plugin when processing DWG files, which can lead to arbitrary code execution or a denial of service upon opening a crafted .dwg file. Affected ...