CVE-2017-9918

CVE-2017-9918 affects IrfanView 4.44 with TOOLS Plugin 4.50. A crafted file can trigger a denial of service or execute arbitrary code due to Data from Faulting Address controlling Branch Selection starting at KERNELBASE!QueryOptionalDelayLoadedAPI. Public references describe multiple related buff...

CVE-2017-9919

IrfanView 4.44 (32‑bit) with TOOLS Plugin 4.50 is vulnerable to crafted files that may cause a denial of service or arbitrary code execution. The root cause involves data from a faulting address affecting control flow (notably LdrpResCompareResourceNames) and related memory/heap/branch control is...

CVE-2017-9915

Affected software: IrfanView 4.44 (32‑bit) with TOOLS plugin 4.50. The CVE-2017-9915 entry describes an attacker-controlled crafted file that triggers a Read Access Violation in a memory copy operation (ntdll_77df0000!memcpy) and related memory/heap handling, enabling arbitrary code execution or ...

CVE-2017-9922

CVE-2017-9922 concerns IrfanView 4.44 (32‑bit) with TOOLS Plugin 4.50, which is vulnerable to multiple buffer‑overflow/memory‑corruption flaws. Connected sources detail several vulnerabilities (items 1–14 in KLA11064) affecting 32‑bit IrfanView, with attack vectors ranging from crafted image/file...

CVE-2017-9920

CVE-2017-9920 affects IrfanView 4.44 (32‑bit) with TOOLS Plugin 4.50. Technical details in connected docs describe multiple buffer overflow and related vulnerability patterns (e.g., data from faulting address controlling branch/code flow) that can lead to denial of service or arbitrary code execu...

CVE-2017-9919

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResCompareResourceNames+0x0000000000000087."...

CVE-2017-9922: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpCompareResourceNamesU+0x0000000000000062."...

PT-2017-19285

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS Plugin 4.50 Description The issue might allow attackers to cause a denial of service or execute arbitrary code via a crafted file. It is related to "Data from Faulting Address controls Branch Selection...

PT-2017-19282

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS Plugin 4.50 Description The issue might allow attackers to cause a denial of service or execute arbitrary code via a crafted file. It is related to "Data from Faulting Address controls Branch Selection...

CVE-2017-9918: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!QueryOptionalDelayLoadedAPI+0x0000000000000c42."...

CVE-2017-9915: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS plugin 4.50 allows attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "Read Access Violation on Block Data Move starting at ntdll77df0000!memcpy+0x0000000000000033."...

CVE-2017-9919: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResCompareResourceNames+0x0000000000000087."...

CVE-2017-9916: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlFreeHandle+0x00000000000001b6."...

CVE-2017-9923: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!EnumResourceTypesInternal+0x0000000000000589."...

CVE-2017-9920: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."...

PT-2017-19286

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS Plugin 4.50 Description The issue might allow attackers to cause a denial of service or execute arbitrary code via a crafted file. This is related to "Data from Faulting Address controls Branch Selection...

PT-2017-19283

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS Plugin 4.50 Description The issue might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection startin...

PT-2017-19278

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS plugin 4.50 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted file. It is related to a "Read Access Violation on Block Data Move starting at ntdl...

PT-2017-19284

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS Plugin 4.50 Description The issue might allow attackers to cause a denial of service or execute arbitrary code via a crafted file. It is related to "Data from Faulting Address controls Branch Selection...

PT-2017-19281

Name of the Vulnerable Software and Affected Versions IrfanView version 4.44 32bit with TOOLS Plugin 4.50 Description The issue might allow attackers to cause a denial of service or execute arbitrary code via a crafted file. It is related to "Data from Faulting Address controls Branch Selection...