Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014eb."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007236."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000031a0."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c995."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216."...

CVE-2017-8370

IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...

CVE-2017-9875

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000cdb."...

CVE-2017-9532

CVE-2017-9532 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV/buffer overflow, leading to arbitrary code execution or denial of service. Public reports describe multiple FPX-related and related-plugin vulnerabilities in IrfanView 4.44. Rem...

CVE-2017-10925

CVE-2017-10925 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.47. The vulnerability arises in the FPX component when processing FPX data, specifically FPX_GetScanDevicePropertyGroup, where crafted .fpx files can cause a denial of service and potentially other impact. Multiple connected advisor...

CVE-2017-9534

CVE-2017-9534 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file enables arbitrary code execution or denial of service, related to a User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426. Several connected advisories corroborate buffer/heap issues in FPX-relat...

CVE-2017-8370

CVE-2017-8370 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.45. The vulnerability occurs when processing FPX files, allowing remote attackers to cause a heap corruption and application crash or to execute arbitrary code. This is tied to the FPX handling code in IrfanView’s FPX plugin and is d...

CVE-2017-9534

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426."...

CVE-2017-9876

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c995."...

CVE-2017-9876

CVE-2017-9876 affects IrfanView 4.44 (32‑bit) when used with FPX Plugin 4.46. A crafted FPX file can cause arbitrary code execution or a denial of service, with the underlying issue described as Data from Faulting Address controls Code Flow at FPX_GetScanDevicePropertyGroup+0x…c995. Public notes ...

CVE-2017-9884

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a FPX/FXP-related buffer overflow when opening crafted .fpx files, leading to DoS and potential arbitrary code execution. Affected component: FPX Plugin; root cause involves malformed FPX processing (Data from Faulting Address/branch selection...

CVE-2017-9881

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014e7."...

CVE-2017-10926

IrfanView 4.44 32bit with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-9528

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000000f53."...

CVE-2017-9533

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000a9b."...