CVE-2017-9886

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9874

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000007822."...

CVE-2017-9535

The CVE-2017-9535 entry affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX-related code paths (notably FPX_GetPlugInInfo+0x...), leading to arbitrary code execution or DoS. Connected advisories confirm multiple FPX-related buffer overf...

CVE-2017-9892

CVE-2017-9892 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file can cause a denial of service and, possibly, otherImpact, due to heap/memory handling issues as described in the vulnerability details (notably data from faulting address influencing heap/control flow). The is...

CVE-2017-9890

CVE-2017-9890 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 where a crafted FPX file can trigger a Read Access Violation in FPX code, leading to DoS or possibly arbitrary code execution. Several connected advisories describe multiple FPX/format parsing vulnerabilities and buffer/heap overf...

CVE-2017-9533

Summary of CVE-2017-9533 : A buffer/AV condition in IrfanView 4.44 (32-bit) with FPX Plugin 4.46 can be triggered by a specially crafted .fpx file. The underlying issue is described as a write-after-read/AV in FPX_DE_Decode (and related FPX code paths), enabling arbitrary code execution or Denial...

CVE-2017-9873

CVE-2017-9873 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.46. A crafted FPX (.fpx) file can trigger a Read Access Violation on control flow (FPX!GetPlugInInfo+0x…), enabling arbitrary code execution or a denial of service. Root cause involves FPX plugin processing of FPX files leading to me...

CVE-2017-9891

Summary of the CVE-2017-9891 details (IrfanView FPX plugin) Affected product: IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. Root cause/technical detail: A vulnerability in the FPX handling path is triggered by a specially crafted .fpx file. According to the sources, data from a faulting address i...

CVE-2017-9878

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c99a."...

CVE-2017-10925

CVE-2017-10925 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.47. The vulnerability arises in the FPX component when processing FPX data, specifically FPX_GetScanDevicePropertyGroup, where crafted .fpx files can cause a denial of service and potentially other impact. Multiple connected advisor...

CVE-2017-8370

IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...

CVE-2017-9884

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a FPX/FXP-related buffer overflow when opening crafted .fpx files, leading to DoS and potential arbitrary code execution. Affected component: FPX Plugin; root cause involves malformed FPX processing (Data from Faulting Address/branch selection...

CVE-2017-9879

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by CVE-2017-9879. A crafted FPX file can cause arbitrary code execution or a denial of service due to a faulting address write vulnerability in FPX_GetScanDevicePropertyGroup. This is supported by NVD/CNVD advisories and related risk notes,...

CVE-2017-8370

CVE-2017-8370 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.45. The vulnerability occurs when processing FPX files, allowing remote attackers to cause a heap corruption and application crash or to execute arbitrary code. This is tied to the FPX handling code in IrfanView’s FPX plugin and is d...

CVE-2017-9874

Summary (CVE-2017-9874) IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a buffer/write‑type vulnerability that can lead to arbitrary code execution or denial of service when processing a crafted .fpx file. The issue is tied to a User Mode Write AV originating from FPX_GetScanDevicePropertyG...

CVE-2017-10926

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 contains a vulnerability in FPX parsing that can be triggered by a crafted .fpx file, potentially causing a denial of service or other impact (Read Access Violation). Root cause relates to FPX_GetScanDevicePropertyGroup/related code paths and WOW64 han...

CVE-2017-9885

CVE-2017-9885 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file can trigger memory corruption in FPX_GetScanDevicePropertyGroup, with the vulnerability described as leading to a denial of service or possibly other impact (e.g., arbitrary code execution) per connected sourc...

CVE-2017-9882

CVE-2017-9882 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX plugin contains multiple buffer/read‑violation vulnerabilities in .fpx handling (notably FPX_GetScanDevicePropertyGroup related paths), enabling an attacker to craft a .fpx file that can cause arbitrary code execution or ...

CVE-2017-9532

CVE-2017-9532 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV/buffer overflow, leading to arbitrary code execution or denial of service. Public reports describe multiple FPX-related and related-plugin vulnerabilities in IrfanView 4.44. Rem...

CVE-2017-9888

Affected product: IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX plugin contains buffer overflow vulnerabilities when handling FPX files, reported as DoS and, in several entries, potential arbitrary code execution via specially crafted FPX files (local exploit). Related advisories confirm ...