Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004cbb."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000031a0."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

Code injection

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x000000000000dcab."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX+0x0000000000007216."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c998."...

Code injection

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c995."...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!TpAllocCleanupGroup+0x00000000000003d7."...

CVE-2017-8370

IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...

CVE-2017-9894

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx!gffGetFormatInfo+0x0000000000029272."...

CVE-2017-9875

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000cdb."...

CVE-2017-9532

CVE-2017-9532 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV/buffer overflow, leading to arbitrary code execution or denial of service. Public reports describe multiple FPX-related and related-plugin vulnerabilities in IrfanView 4.44. Rem...

CVE-2017-10925

CVE-2017-10925 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.47. The vulnerability arises in the FPX component when processing FPX data, specifically FPX_GetScanDevicePropertyGroup, where crafted .fpx files can cause a denial of service and potentially other impact. Multiple connected advisor...

CVE-2017-9534

CVE-2017-9534 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file enables arbitrary code execution or denial of service, related to a User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426. Several connected advisories corroborate buffer/heap issues in FPX-relat...

CVE-2017-9886

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-9883

CVE-2017-9883 affects IrfanView 4.44 (32‑bit) with FPX Plugin (around 4.46/4.47). Affected component: FPX plugin parsing of .fpx files leading to memory corruption (Data from Faulting Address controls Code Flow), enabling arbitrary code execution or denial of service. Several connected advisories...

CVE-2017-9876

CVE-2017-9876 affects IrfanView 4.44 (32‑bit) when used with FPX Plugin 4.46. A crafted FPX file can cause arbitrary code execution or a denial of service, with the underlying issue described as Data from Faulting Address controls Code Flow at FPX_GetScanDevicePropertyGroup+0x…c995. Public notes ...

CVE-2017-9900

XnView Classic for Windows 2.40 is affected by a remote code execution vulnerability via crafted .fpx files. The issue is described as a buffer/flow control problem where Data from Faulting Address influences code flow starting at Xfpx!gffGetFormatInfo+0x000000000002e385. Impact is high (per CVE-...

CVE-2017-8370

CVE-2017-8370 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.45. The vulnerability occurs when processing FPX files, allowing remote attackers to cause a heap corruption and application crash or to execute arbitrary code. This is tied to the FPX handling code in IrfanView’s FPX plugin and is d...

CVE-2017-9534

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426."...