CVE-2017-9881

The CVE-2017-9881 entry concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46, where multiple FPX-related buffer overflow/Code Flow write vulnerabilities allow arbitrary code execution or DoS via crafted .fpx files. Technical details in connected documents show Data from Faulting Address controls...

CVE-2017-9528

CVE-2017-9528 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX_GetScanDevicePropertyGroup, enabling remote code execution or a denial of service. Connected sources corroborate the flaw in the FPX plugin family and list IrfanView 4.44...

CVE-2017-9873

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2."...

CVE-2017-9535

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000016e53."...

CVE-2017-9888

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000031a0."...

CVE-2017-9877

The CVE-2017-9877 entry concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. It describes a vulnerability in FPX_GetScanDevicePropertyGroup where Data from Faulting Address controls Code Flow, enabling arbitrary code execution or a denial of service via a crafted .fpx file. Connected sources co...

CVE-2017-10924

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 is affected by a FPX-related vulnerability in .fpx handling. The issue stems from a User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x…a529, enabling either arbitrary code execution or a denial of service via a crafted .fpx file. The ...

CVE-2017-9528

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000000f53."...

PT-2017-19247 · Microsoft +1 · Ntdll +2

Name of the Vulnerable Software and Affected Versions: IrfanView version 4.44 32bit with FPX Plugin 4.46 Description: The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

Affected software: IrfanView 4.44 (32-bit) with FPX Plugin prior to 4.45. Vulnerability: improper processing of FlashPix (.FPX) files leads to denial of service via an access violation/crash, potentially enabling remote triggering through crafted FPX content. Root cause: described as faulty handl...