PT-2017-19002

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin 4.46 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPX...

CVE-2017-8370: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...

PT-2017-19000

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin 4.46 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file. This is related to a "User Mode Write AV starting at...

CVE-2017-9889: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000003714."...

CVE-2017-9884: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."...

PT-2017-18297

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin 4.45 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in heap corruption and application crash, when processing a FlashPix .FPX file...

CVE-2017-9890: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x000000000000153a."...

CVE-2017-9886: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9879: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

PT-2017-19250

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin 4.46 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to the use of data from a faulting address...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

Affected software: IrfanView 4.44 (32-bit) with FPX Plugin prior to 4.45. Vulnerability: improper processing of FlashPix (.FPX) files leads to denial of service via an access violation/crash, potentially enabling remote triggering through crafted FPX content. Root cause: described as faulty handl...

CVE-2017-7721: Improper Input Validation

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

PT-2017-17907

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with FPX Plugin Description The issue is related to an Access Violation and crash when processing a FlashPix .FPX file. Recommendations For IrfanView version 4.44 32bit with FPX Plugin, update to version 4.45 or...