CVE-2017-9876

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000c995."...

CVE-2017-9888

Affected product: IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX plugin contains buffer overflow vulnerabilities when handling FPX files, reported as DoS and, in several entries, potential arbitrary code execution via specially crafted FPX files (local exploit). Related advisories confirm ...

CVE-2017-9873

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "Read Access Violation on Control Flow starting at FPX!GetPlugInInfo+0x0000000000012bf2."...

CVE-2017-9884

IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 contains a FPX/FXP-related buffer overflow when opening crafted .fpx files, leading to DoS and potential arbitrary code execution. Affected component: FPX Plugin; root cause involves malformed FPX processing (Data from Faulting Address/branch selection...

CVE-2017-9529

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."...

CVE-2017-9528

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x0000000000000f53."...

CVE-2017-9533

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000a9b."...

CVE-2017-10924

IrfanView 4.44 32bit with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a529."...

CVE-2017-9536

CVE-2017-9536 concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability arises when processing specially crafted .fpx files, related to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can lead to arbitrary code execution or a Denial of Service. Conn...

CVE-2017-10926

IrfanView 4.44 32bit with FPX Plugin 4.47 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-9873

CVE-2017-9873 affects IrfanView 4.44 (32-bit) with FPX Plugin 4.46. A crafted FPX (.fpx) file can trigger a Read Access Violation on control flow (FPX!GetPlugInInfo+0x…), enabling arbitrary code execution or a denial of service. Root cause involves FPX plugin processing of FPX files leading to me...

CVE-2017-9909

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlAddAccessAllowedAce+0x000000000000027a."...

CVE-2017-9881

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014e7."...

CVE-2017-9880

The CVE concerns IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file triggers a vulnerability where Data from Faulting Address controls Code Flow in FPX, enabling arbitrary code execution or a denial of service. This is a local issue in the FPX plugin’s handling of FPX files and is ...

CVE-2017-9879

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...

CVE-2017-9892

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x0000000000000393."...

CVE-2017-9899

XnView Classic for Windows, version 2.40, is affected by CVE-2017-9899. The vulnerability allows remote attackers to execute code via a specially crafted .fpx file, with the fault addressed through control flow starting at Xfpx!gffGetFormatInfo+0x000000000002e388. Evidence across CVE records conf...

CVE-2017-9888

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000031a0."...

CVE-2017-9906

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-9903

XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at Xfpx+0x00000000000117ff."...