CVE-2017-15248

IrfanView version 4.44 32bit with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x0000000000063ca6."...

CVE-2017-15248

CVE-2017-15248 concerns IrfanView 4.44 (32‑bit) with PDF plugin 4.43, where a crafted PDF can trigger a buffer overflow in the PDF handling path, allowing arbitrary code execution or denial of service. Multiple connected advisories corroborate IrfanView 4.44 as affected and describe the issue as ...