CVE-2017-9885

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

CVE-2017-10926

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 contains a vulnerability in FPX parsing that can be triggered by a crafted .fpx file, potentially causing a denial of service or other impact (Read Access Violation). Root cause relates to FPX_GetScanDevicePropertyGroup/related code paths and WOW64 han...

CVE-2017-9882

CVE-2017-9882 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The FPX plugin contains multiple buffer/read‑violation vulnerabilities in .fpx handling (notably FPX_GetScanDevicePropertyGroup related paths), enabling an attacker to craft a .fpx file that can cause arbitrary code execution or ...

CVE-2017-9535

The CVE-2017-9535 entry affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted FPX file can trigger a User Mode Write AV in FPX-related code paths (notably FPX_GetPlugInInfo+0x...), leading to arbitrary code execution or DoS. Connected advisories confirm multiple FPX-related buffer overf...

CVE-2017-9878

CVE-2017-9878 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. The vulnerability is triggered by a crafted FPX file, leading to a Read Access Violation on Control Flow in FPX_GetScanDevicePropertyGroup, which can allow arbitrary code execution or cause a denial of service. Connected analyses...

CVE-2017-9896

XnView Classic for Windows 2.40 is vulnerable to remote code execution via crafted .fpx files, caused by a Read Access Violation on control flow in gffGetFormatInfo. Affected software is XnView Classic for Windows; vulnerability details are corroborated by CVE-2017-9896 records in NVD and CNVD/Op...

CVE-2017-9908

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at Xfpx+0x000000000000d6da."...

CVE-2017-9890

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x000000000000153a."...

CVE-2017-9887

The CVE-2017-9887 issue affects IrfanView 4.44 (32‑bit) when used with FPX Plugin 4.46. The vulnerability is a FPX plugin buffer overflow triggered by a specially crafted .fpx file, allowing denial of service and potentially arbitrary code execution. Technical details in connected sources describ...

CVE-2017-9905

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at Xfpx!gffGetFormatInfo+0x00000000000228e8."...

PT-2017-19247 · Microsoft +1 · Ntdll +2

Name of the Vulnerable Software and Affected Versions: IrfanView version 4.44 32bit with FPX Plugin 4.46 Description: The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file. This is related to "Data from Faulting Address controls...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

Affected software: IrfanView 4.44 (32-bit) with FPX Plugin prior to 4.45. Vulnerability: improper processing of FlashPix (.FPX) files leads to denial of service via an access violation/crash, potentially enabling remote triggering through crafted FPX content. Root cause: described as faulty handl...

KLA11016 Denial of service vulnerability in IrfanView

An improper processing of .FPX FlashPix files was found in IrfanView 4.44 32-bit with FPX Plugin before 4.45. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via a specially designed .FPX file. Original advisories...

GOM Player '.fpx' File Denial of Service Vulnerability

GOM Player is a playback program from Korea that supports many formats. A denial of service vulnerability exists in GOM Player version 2.3.10.5266. An attacker can exploit the vulnerability to cause a denial of service memory corruption via a crafted fpx file...

CVE-2017-5881

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

Memory corruption

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

CVE-2017-5881

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...

CVE-2017-5881

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted fpx file...