CVE-2017-9531

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x000000000000176c."...

CVE-2017-9533

Summary of CVE-2017-9533 : A buffer/AV condition in IrfanView 4.44 (32-bit) with FPX Plugin 4.46 can be triggered by a specially crafted .fpx file. The underlying issue is described as a write-after-read/AV in FPX_DE_Decode (and related FPX code paths), enabling arbitrary code execution or Denial...

CVE-2017-10732

CVE-2017-10732 affects IrfanView 4.44 (32-bit) with multiple .rle-related buffer overflow vulnerabilities in image parsing/thumbnailing, potentially enabling DoS or arbitrary code execution. Connected sources enumerate several 32‑bit vulnerabilities and related FPX/TOOL plugins, with root causes ...

CVE-2017-9923

CVE-2017-9923 affects IrfanView 4.44 (32‑bit) with TOOLS Plugin 4.50. The connected CNVD entry confirms a buffer overflow in this configuration when processing a crafted file, enabling a potential attacker to cause a denial of service or execute arbitrary code. The root cause is described as a bu...

CVE-2017-9531

CVE-2017-9531 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a user‑mode write/overflow, leading to arbitrary code execution or a denial of service. Connected sources corroborate a FPX‑related buffer/AV condition in multiple advisories (CNVD-2017-14128; Kaspe...

CVE-2017-10734

CVE-2017-10734 affects IrfanView 4.44 (32-bit). The vulnerability is a buffer/handle issue during .rle processing, with the description noting that a crafted .rle file may cause denial of service or unspecified impact, tied to an invalid handle in wow64. CNVD-2017-14159 corroborates a .rle buffer...

CVE-2017-9919

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResCompareResourceNames+0x0000000000000087."...

CVE-2017-9920

CVE-2017-9920 affects IrfanView 4.44 (32‑bit) with TOOLS Plugin 4.50. Technical details in connected docs describe multiple buffer overflow and related vulnerability patterns (e.g., data from faulting address controlling branch/code flow) that can lead to denial of service or arbitrary code execu...

CVE-2017-9920

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."...

CVE-2017-9917

CVE-2017-9917 affects IrfanView 4.44 (32‑bit) with TOOLS Plugin 4.50. A crafted file can cause denial of service or possibly other impact via a faulting address in RtlFreeHandle, per the NVD entry. Connected reports reiterate multiple but related buffer/flow issues tied to IrfanView 4.44 with TOO...

CVE-2017-9918

CVE-2017-9918 affects IrfanView 4.44 with TOOLS Plugin 4.50. A crafted file can trigger a denial of service or execute arbitrary code due to Data from Faulting Address controlling Branch Selection starting at KERNELBASE!QueryOptionalDelayLoadedAPI. Public references describe multiple related buff...

CVE-2017-9882

CVE-2017-9882 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX plugin contains multiple buffer/read‑violation vulnerabilities in .fpx handling (notably FPX_GetScanDevicePropertyGroup related paths), enabling an attacker to craft a .fpx file that can cause arbitrary code execution or ...

CVE-2017-9882

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Block Data Move starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000b84f."...

CVE-2017-9878

CVE-2017-9878 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability is triggered by a crafted FPX file, leading to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can allow arbitrary code execution or cause a denial of service. Connected analyses...

CVE-2017-9879

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by CVE-2017-9879. A crafted FPX file can cause arbitrary code execution or a denial of service due to a faulting address write vulnerability in FPX_GetScanDevicePropertyGroup. This is supported by NVD/CNVD advisories and related risk notes,...

CVE-2017-9883

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216."...

CVE-2017-9884

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpCoalesceFreeBlocks+0x00000000000001b6."...

CVE-2017-9890

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x000000000000153a."...

CVE-2017-9891

Summary of the CVE-2017-9891 details (IrfanView FPX plugin) Affected product: IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. Root cause/technical detail: A vulnerability in the FPX handling path is triggered by a specially crafted .fpx file. According to the sources, data from a faulting address i...

CVE-2017-9923

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589."...