Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000a9b."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c99a."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x000000000000176c."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Block Data Move starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000b84f."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9534

CVE-2017-9534 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file enables arbitrary code execution or denial of service, related to a User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426. Several connected advisories corroborate buffer/heap issues in FPX-relat...

CVE-2017-9875

CVE-2017-9875 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX decoding path allows buffer/heap overflows via specially crafted FPX files, enabling arbitrary code execution or DoS. Related advisories (CNVD-2017-15681; Kaspersky KLA11064) describe FPX plugin‑related overflows and conf...

CVE-2017-9883

CVE-2017-9883 affects IrfanView 4.44 (32‑bit) with FPX Plugin (around 4.46/4.47). Affected component: FPX plugin parsing of .fpx files leading to memory corruption (Data from Faulting Address controls Code Flow), enabling arbitrary code execution or denial of service. Several connected advisories...

CVE-2017-9880

The CVE concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file triggers a vulnerability where Data from Faulting Address controls Code Flow in FPX, enabling arbitrary code execution or a denial of service. This is a local issue in the FPX plugin’s handling of FPX files and is ...

CVE-2017-9878

CVE-2017-9878 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability is triggered by a crafted FPX file, leading to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can allow arbitrary code execution or cause a denial of service. Connected analyses...

CVE-2017-9887

The CVE-2017-9887 issue affects IrfanView 4.44 (32‑bit) when used with FPX Plugin 4.46. The vulnerability is a FPX plugin buffer overflow triggered by a specially crafted .fpx file, allowing denial of service and potentially arbitrary code execution. Technical details in connected sources describ...

CVE-2017-9876

CVE-2017-9876 affects IrfanView 4.44 (32‑bit) when used with FPX Plugin 4.46. A crafted FPX file can cause arbitrary code execution or a denial of service, with the underlying issue described as Data from Faulting Address controls Code Flow at FPX_GetScanDevicePropertyGroup+0x…c995. Public notes ...

CVE-2017-9889

Affected software : IrfanView 4.44 (32-bit) with FPX Plugin 4.46. Vulnerability : buffer overflow/read access violation in FPX.GetScanDevicePropertyGroup chain when processing a crafted .fpx file, leading to DoS and potential arbitrary code execution. Impact : denial of service; possible other im...

CVE-2017-9531

CVE-2017-9531 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a user‑mode write/overflow, leading to arbitrary code execution or a denial of service. Connected sources corroborate a FPX‑related buffer/AV condition in multiple advisories (CNVD-2017-14128; Kaspe...

CVE-2017-9531

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x000000000000176c."...

CVE-2017-9532

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x0000000000001555."...

CVE-2017-9533

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000a9b."...

CVE-2017-9528

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000000f53."...

CVE-2017-9536

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014eb."...