CVE-2019-17246

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c...

CVE-2019-17246

IrfanView 4.53 is affected by a User Mode Write AV vulnerability triggered at WSQ!ReadWSQ+0x000000000000258c. Redundant sources describe it as a user-mode write access conflict that could allow reading WSQ files; CNVD notes reading WSQ files. CVSS metrics indicate a local, low-attack‑complexity i...

CVE-2019-17245

CVE-2019-17245 affects IrfanView 4.53 with a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359. Public documents describe a user-mode write access conflict in WSQ handling that can lead to partial disclosure/integrity violations and possible denial of service. The NVD entry assigns CV...

CVE-2019-17245

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359...

CVE-2019-17244

IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000001d8a...

CVE-2019-17244

CVE-2019-17244 affects IrfanView 4.53, where Data from a Faulting Address can control Code Flow starting at JPEG_LS+0x1d8a, enabling potential code execution. The issue is documented with CVSS scores (2.0/3.1) indicating a high-severity impact including confidentiality, integrity, and availabilit...

CVE-2019-17243

CVE-2019-17243 affects IrfanView 4.53 with a memory-corruption vulnerability that allows data from a faulting address to influence code flow at JPEG_LS+0x3155. The NVD entry describes it as a memory corruption issue in IrfanView 4.53 leading to potential control of execution (crash or code flow a...

CVE-2019-17243

IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEGLS+0x0000000000003155...

CVE-2019-17242

CVE-2019-17242 affects IrfanView 4.53, where a User Mode Write AV can be triggered in the WSQ reader path (WSQ!ReadWSQ+0x…). The exposed issue is a user‑mode write access vulnerability in the WSQ handling, which can lead to memory corruption (as described by “Write AV”). The provided sources cons...

CVE-2019-17242

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f...

CVE-2019-17241

CVE-2019-17241 affects IrfanView 4.53. The vulnerability is a User Mode Write condition that starts at WSQ!ReadWSQ+0x000000000000d563, reported to allow writing in user mode and potentially reading WSQ data. Public sources describe the flaw as a local issue in which an attacker could leverage the...

CVE-2019-17241

IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563...

IrfanView Buffer Overflow Vulnerability (CNVD-2019-42241)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.53. The vulnerability stems from a networked system or product th...

KLA11653 Multiple vulnerabilities in IrfanView

Multiple vulnerabilities were found in IrfanView. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. User Mode Write Access Violation vulnerability in IrfanView can be exploited to cause denia...

CVE-2019-16887

In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc...

CVE-2019-16887

In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc...

Design/Logic Flaw

In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc...

CVE-2019-16887

Affected software: IrfanView 4.53 and earlier. The issue is described as data from a faulting address that controls a subsequent write address at image00400000+0x000000000001dcfc, indicating a memory handling flaw. Related sources frame this as a buffer/heap overflow risk and, in some summaries, ...

CVE-2019-16887

In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc...

KLA11652 A faulting address control vulnerability in IrfanView

A faulting address control vulnerability was found in IrfanView. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories - Related products IrfanView CVE list CVE-2019-16887 high Solution Update to the latest version Download IrfanView Impacts OSI Obtai...