CVE-2017-15245

CVE-2017-15245 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43. The vulnerability enables denial of service and potentially other impact via a crafted PDF, related to data from a faulting address controlling branch/Code flow in PDF parsing (XML/Parser paths cited in the advisory). Connected ...

CVE-2017-15246

CVE-2017-15246 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43 . The issue is a buffer/read access violation in the PDF handling (Read Access Violation on Block Data Move) that can allow a local attacker to execute arbitrary code or cause a denial of service via a crafted PDF. The CVSS indic...

CVE-2017-15260

IrfanView version 4.44 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000129a59."...

CVE-2017-15254

CVE-2017-15254 affects IrfanView 4.44 (32-bit) with PDF plugin 4.43. A crafted PDF file can trigger a Read Access Violation in PDF parser (PDF!xmlGetGlobalState) leading to DoS or potentially other impacts. Root cause: memory/validation issue in PDF handling. Affected product: IrfanView 4.44 with...

CVE-2017-15244

CVE-2017-15244 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43. A crafted PDF can trigger a buffer overflow in the PDF plugin, leading to denial of service and potentially other impact. The CVSS data indicate local exploitation with the potential for high impact on confidentiality, integrity...

CVE-2017-15259

CVE-2017-15259 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43. The PDF parsing path in the plug‑in can be triggered by a crafted .pdf file, causing a denial of service and potentially other impact via Data from Faulting Address influencing control flow in PDF!xmlParserInputRead; multiple CV...

CVE-2017-15263

CVE-2017-15263 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43. A crafted PDF can trigger a buffer overflow in the PDF handling code, leading to a denial of service and potentially other impacts. Several connected advisories describe memory/heap corruption patterns and data‑flow issues aroun...

CVE-2017-15240

CVE-2017-15240 affects IrfanView 4.44 (32‑bit) with PDF plugin 4.43. A crafted PDF can cause a denial of service or potentially other unspecified impact via a Read Access Violation in the PDF parser (xmlParserInputRead). Exploitation context appears local, with the Read Access Violation path cite...

KLA11064 Multiple vulnerabilities in IrfanView

Multiple serious vulnerabilities have been found in IrfanView 4.44. Malicious users can exploit these vulnerabilities to cause a denial of service or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An integer overflow vulnerability in the JPEG 2000 parser can be exploited...

IrfanView buffer overflow vulnerability (CNVD-2017-30396)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.44 32-bit. The vulnerability can be exploited to cause ...

Design/Logic Flaw

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."...

CVE-2017-14693

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."...

CVE-2017-14693

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."...

CVE-2017-14693

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."...

CVE-2017-14693

CVE-2017-14693 affects IrfanView 4.44 (32‑bit). A crafted .djvu file can trigger a vulnerability in DJVU!GetPlugInInfo+0x... leading to a denial of service and possibly other impact. Some sources mention in-the-wild malware exploitation. Remediation: update IrfanView to the latest version. Techni...

IrfanView buffer overflow vulnerability (CNVD-2017-30395)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. This vulnerability can be exploited b...

IrfanView buffer overflow vulnerability (CNVD-2017-27602)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. A local attacker can exploit this...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-34094)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. This vulnerability can be exploited b...

IrfanView JPEG 2000 Reference Tile Width Arbitrary Code Execution Vulnerability(CVE-2017-2813)

Summary An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewin...

CVE-2017-14578

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...