CVE-2017-15757

CVE-2017-15757 affects IrfanView 4.50 (64‑bit) with the BabaCAD4Image plugin (v1.3). A crafted .dwg file can trigger a denial of service or potentially other impact via Data from Faulting Address in BabaCAD4Image!ShowPlugInOptions+0x29ba. Root cause is a vulnerability in the BabaCAD4Image plugin ...

CVE-2017-15753

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at...

CVE-2017-15765

IrfanView 4.50 (64‑bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15765. The issue arises when processing a crafted .dwg file, with the faulting address data used as arguments in a subsequent CADIMAGE function call (CADIMAGE+0x00000000003e9462), leading to a denial of service and pote...

CVE-2017-15745

IrfanView 4.50 64‑bit with CADImage plugin 12.0.0.5 is affected by a vulnerability triggered by a crafted .dwg file, leading to DoS and potentially other impacts (root cause involves Data from Faulting Address/Branch Selection at CADIMAGE+0x…002ca2e). The issue is due to a buffer handling flaw in...

CVE-2017-15742

IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5 is affected by CVE-2017-15742. A crafted .dwg file can cause a denial of service and may have other unspecified impacts due to a Read Access Violation in CADIMAGE+0x00000000003d2328. Remediation: update IrfanView to the latest version (as per ...

CVE-2017-15742

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at CADIMAGE+0x00000000003d2328."...

CVE-2017-15748

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a."...

CVE-2017-15756

IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin 1.3 is affected by a vulnerability in the BabaCAD4Image plugin when handling crafted .dwg files. The issue is described as a buffer/WRITE address control fault starting at BabaCAD4Image!ShowPlugInOptions+0x4d7c4, enabling arbitrary code execut...

CVE-2017-15764

IrfanView 4.50 (64‑bit) with BabaCAD4Image plugin 1.3 is affected. A crafted .dwg file can trigger a Read Access Violation in BabaCAD4Image!ShowPlugInOptions, causing denial of service and potentially unspecified other impact. Remediation: update IrfanView to the latest version.

CVE-2017-15752

IrfanView 4.50 (64‑bit) with BabaCAD4Image plugin 1.3 is affected by a buffer overflow in the BabaCAD4Image plugin when handling .dwg files, which can enable arbitrary code execution or a denial of service. The issue is tied to data from a faulting address influencing a subsequent write address, ...

CVE-2017-15750

CVE-2017-15750 affects IrfanView 4.50 (64‑bit) with the BabaCAD4Image plugin 1.3. A crafted .dwg file can trigger a read access violation in BabaCAD4Image!ShowPlugInOptions, leading to a denial of service (and potentially other impacts). Exploitation is described as local and requires access to a...

CVE-2017-15743

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address may be used as a return value starting at CADIMAGE+0x00000000003d24a0."...

CVE-2017-15756

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000004d7c4."...

CVE-2017-15759

CVE-2017-15759 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin (v1.3). The vulnerability arises from a buffer overflow in the BabaCAD4Image plugin when processing DWG files, which can lead to arbitrary code execution or a denial of service upon opening a crafted .dwg file. Affected ...

CVE-2017-15749

CVE-2017-15749 affects IrfanView 4.50 (64-bit) with the CADImage plugin 12.0.0.5. The connected sources describe a vulnerability in the CADImage plugin that allows a crafted .dwg file to cause a denial of service (and possibly other impacts). The underlying issue is evidenced by references to Dat...

CVE-2017-15763

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001eca0."...

CVE-2017-15753

CVE-2017-15753 affects IrfanView 4.50 (64-bit) with the BabaCAD4Image plugin v1.3. A buffer overflow in BabaCAD4Image (ShowPlugInOptions+0x29c2) can be triggered by a crafted .dwg file, leading to DoS and potentially other impact. Affected product: IrfanView with BabaCAD4Image plugin 1.3; root ca...

CVE-2017-15741

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."...

CVE-2017-15741

CVE-2017-15741 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5 and can be triggered by a crafted .dwg file to cause a denial of service and possibly other impacts, related to a stack corruption at CADIMAGE+0x3d2378. Connected sources (SUSE, CNVD, NVD, OpenVAS context) confirm th...

CVE-2017-15737

IrfanView 4.50 64-bit with CADImage plugin 12.0.0.5 is vulnerable to denial of service and possibly other impact when processing specially crafted .dwg files, due to a Read Access Violation in CADIMAGE. The issue is triggered by a crafted CAD file and is associated with IrfanView’s CADImage handl...