CVE-2017-9889

Affected software : IrfanView 4.44 (32-bit) with FPX Plugin 4.46. Vulnerability : buffer overflow/read access violation in FPX.GetScanDevicePropertyGroup chain when processing a crafted .fpx file, leading to DoS and potential arbitrary code execution. Impact : denial of service; possible other im...

CVE-2017-9879

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by CVE-2017-9879. A crafted FPX file can cause arbitrary code execution or a denial of service due to a faulting address write vulnerability in FPX_GetScanDevicePropertyGroup. This is supported by NVD/CNVD advisories and related risk notes,...

CVE-2017-9535

The CVE-2017-9535 entry affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX-related code paths (notably FPX_GetPlugInInfo+0x...), leading to arbitrary code execution or DoS. Connected advisories confirm multiple FPX-related buffer overf...

CVE-2017-9878

CVE-2017-9878 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability is triggered by a crafted FPX file, leading to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can allow arbitrary code execution or cause a denial of service. Connected analyses...

CVE-2017-9528

CVE-2017-9528 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX_GetScanDevicePropertyGroup, enabling remote code execution or a denial of service. Connected sources corroborate the flaw in the FPX plugin family and list IrfanView 4.44...

CVE-2017-9883

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216."...

CVE-2017-9890

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x000000000000153a."...

CVE-2017-10926

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 contains a vulnerability in FPX parsing that can be triggered by a crafted .fpx file, potentially causing a denial of service or other impact (Read Access Violation). Root cause relates to FPX_GetScanDevicePropertyGroup/related code paths and WOW64 han...

CVE-2017-10924: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.44 32bit with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a529."...

CVE-2017-9877: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c998."...

CVE-2017-9886: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-8370: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...

PT-2017-19247 · Microsoft +1 · Ntdll +2

Name of the Vulnerable Software and Affected Versions: IrfanView version 4.44 32bit with FPX Plugin 4.46 Description: The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls...

CVE-2017-9878: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c99a."...

CVE-2017-9534: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426."...

CVE-2017-9891: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-9873: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2."...

CVE-2017-9875: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000cdb."...

CVE-2017-9536: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014eb."...

CVE-2017-9532: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x0000000000001555."...