CVE-2017-8369

CVE-2017-8369 affects IrfanView 4.44 (32-bit). The vulnerability arises from a Data from Faulting Address that controls branch selection during image viewing/thumbnailing (USER32!wvsprintfA+0x...); this can allow arbitrary code execution via a crafted file. Exploitation is noted as malware exists...

CVE-2017-8420

Removed by vendor...

Cross site scripting

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...