CVE-2017-10925

CVE-2017-10925 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.47. The vulnerability arises in the FPX component when processing FPX data, specifically FPX_GetScanDevicePropertyGroup, where crafted .fpx files can cause a denial of service and potentially other impact. Multiple connected advisor...

CVE-2017-9880

The CVE concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file triggers a vulnerability where Data from Faulting Address controls Code Flow in FPX, enabling arbitrary code execution or a denial of service. This is a local issue in the FPX plugin’s handling of FPX files and is ...

CVE-2017-9873

CVE-2017-9873 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.46. A crafted FPX (.fpx) file can trigger a Read Access Violation on control flow (FPX!GetPlugInInfo+0x…), enabling arbitrary code execution or a denial of service. Root cause involves FPX plugin processing of FPX files leading to me...

CVE-2017-9532

CVE-2017-9532 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV/buffer overflow, leading to arbitrary code execution or denial of service. Public reports describe multiple FPX-related and related-plugin vulnerabilities in IrfanView 4.44. Rem...

CVE-2017-9883

CVE-2017-9883 affects IrfanView 4.44 (32‑bit) with FPX Plugin (around 4.46/4.47). Affected component: FPX plugin parsing of .fpx files leading to memory corruption (Data from Faulting Address controls Code Flow), enabling arbitrary code execution or denial of service. Several connected advisories...

CVE-2017-9534

CVE-2017-9534 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file enables arbitrary code execution or denial of service, related to a User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426. Several connected advisories corroborate buffer/heap issues in FPX-relat...

CVE-2017-9886

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9873

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2."...

CVE-2017-10924

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 is affected by a FPX-related vulnerability in .fpx handling. The issue stems from a User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x…a529, enabling either arbitrary code execution or a denial of service via a crafted .fpx file. The ...

CVE-2017-9878

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c99a."...

CVE-2017-9875

CVE-2017-9875 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX decoding path allows buffer/heap overflows via specially crafted FPX files, enabling arbitrary code execution or DoS. Related advisories (CNVD-2017-15681; Kaspersky KLA11064) describe FPX plugin‑related overflows and conf...

CVE-2017-9880

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007236."...

CVE-2017-9881

The CVE-2017-9881 entry concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46, where multiple FPX-related buffer overflow/Code Flow write vulnerabilities allow arbitrary code execution or DoS via crafted .fpx files. Technical details in connected documents show Data from Faulting Address controls...

CVE-2017-9879

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

CVE-2017-9888

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000031a0."...

CVE-2017-9874

Summary (CVE-2017-9874) IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a buffer/write‑type vulnerability that can lead to arbitrary code execution or denial of service when processing a crafted .fpx file. The issue is tied to a User Mode Write AV originating from FPX_GetScanDevicePropertyG...

CVE-2017-9531

CVE-2017-9531 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a user‑mode write/overflow, leading to arbitrary code execution or a denial of service. Connected sources corroborate a FPX‑related buffer/AV condition in multiple advisories (CNVD-2017-14128; Kaspe...

CVE-2017-9886

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by FPX parsing vulnerabilities that can be triggered by a specially crafted .fpx file, potentially allowing arbitrary code execution or denial of service. The public details consistently attribute the issue to Data from Faulting Address and...

CVE-2017-9533

Summary of CVE-2017-9533 : A buffer/AV condition in IrfanView 4.44 (32-bit) with FPX Plugin 4.46 can be triggered by a specially crafted .fpx file. The underlying issue is described as a write-after-read/AV in FPX_DE_Decode (and related FPX code paths), enabling arbitrary code execution or Denial...

CVE-2017-9877

The CVE-2017-9877 entry concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. It describes a vulnerability in FPX_GetScanDevicePropertyGroup where Data from Faulting Address controls Code Flow, enabling arbitrary code execution or a denial of service via a crafted .fpx file. Connected sources co...