CVE-2017-9873

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2."...

CVE-2017-9884

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a FPX/FXP-related buffer overflow when opening crafted .fpx files, leading to DoS and potential arbitrary code execution. Affected component: FPX Plugin; root cause involves malformed FPX processing (Data from Faulting Address/branch selection...

CVE-2017-9881

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014e7."...

CVE-2017-9528

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000000f53."...

CVE-2017-9533

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000a9b."...

CVE-2017-10924

IrfanView 4.44 32bit with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a529."...

CVE-2017-9873

CVE-2017-9873 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.46. A crafted FPX (.fpx) file can trigger a Read Access Violation on control flow (FPX!GetPlugInInfo+0x…), enabling arbitrary code execution or a denial of service. Root cause involves FPX plugin processing of FPX files leading to me...

CVE-2017-9536

CVE-2017-9536 concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability arises when processing specially crafted .fpx files, related to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can lead to arbitrary code execution or a Denial of Service. Conn...

CVE-2017-9531

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x000000000000176c."...

CVE-2017-9879

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

CVE-2017-9888

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000031a0."...

CVE-2017-10924

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 is affected by a FPX-related vulnerability in .fpx handling. The issue stems from a User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x…a529, enabling either arbitrary code execution or a denial of service via a crafted .fpx file. The ...

CVE-2017-9886

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by FPX parsing vulnerabilities that can be triggered by a specially crafted .fpx file, potentially allowing arbitrary code execution or denial of service. The public details consistently attribute the issue to Data from Faulting Address and...

CVE-2017-9887

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-9889

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000003714."...

CVE-2017-9875

CVE-2017-9875 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX decoding path allows buffer/heap overflows via specially crafted FPX files, enabling arbitrary code execution or DoS. Related advisories (CNVD-2017-15681; Kaspersky KLA11064) describe FPX plugin‑related overflows and conf...

CVE-2017-9874

Summary (CVE-2017-9874) IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a buffer/write‑type vulnerability that can lead to arbitrary code execution or denial of service when processing a crafted .fpx file. The issue is tied to a User Mode Write AV originating from FPX_GetScanDevicePropertyG...

CVE-2017-9531

CVE-2017-9531 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a user‑mode write/overflow, leading to arbitrary code execution or a denial of service. Connected sources corroborate a FPX‑related buffer/AV condition in multiple advisories (CNVD-2017-14128; Kaspe...

CVE-2017-9533

Summary of CVE-2017-9533 : A buffer/AV condition in IrfanView 4.44 (32-bit) with FPX Plugin 4.46 can be triggered by a specially crafted .fpx file. The underlying issue is described as a write-after-read/AV in FPX_DE_Decode (and related FPX code paths), enabling arbitrary code execution or Denial...

CVE-2017-9535

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000016e53."...