CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

Code injection

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

Code injection

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

CVE-2021-27224

The CVE-2021-27224 entry concerns IrfanView 4.57 with the WPG plugin (WPG.dll) prior to version 3.1.0.0. A user-mode write access violation in WPG (starting at WPG+0x...12ec6) could allow remote attackers to execute arbitrary code. Public sources consistently describe an out-of-bounds/write condi...

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

CVE-2021-27362

The CVE-2021-27362 entry concerns the IrfanView WPG plugin (older than 3.1.0.0) used with IrfanView 4.57, where a Read Access Violation on control flow (WPG!ReadWPG_W+0x…133) could allow remote attackers to execute arbitrary code. This vulnerability is described across multiple sources as an out-...

CVE-2021-27224: Out-of-bounds Write

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

CVE-2021-27362: Out-of-bounds Read

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

PT-2021-17333

Name of the Vulnerable Software and Affected Versions: WPG plugin versions prior to 3.1.0.0 for IrfanView 4.57 Description: The issue is related to a user-mode write access violation, which could potentially allow remote attackers to execute arbitrary code. This violation occurs starting at a...

IrfanView Buffer Error Vulnerability

IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in WPG plugin before 3.1.0.0 for IrfanView 4.57, which can be exploited by remote...

PT-2021-17413

Name of the Vulnerable Software and Affected Versions WPG plugin versions prior to 3.1.0.0 for IrfanView 4.57 Description The issue is related to a Read Access Violation on Control Flow, which could potentially allow remote attackers to execute arbitrary code. This occurs starting at WPG!ReadWPG...

IrfanView buffer error vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds write vulnerability in IrfanView WPG plugin allows remote attackers to submit special requests that could crash the application or execute arbitrary code in the application...

graphicsmagick:coder_WPG_fuzzer: Use-of-uninitialized-value in DestroyThreadViewSet

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5232822816210944 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_WPG_fuzzer: Heap-double-free in MagickFree

Detailed Report: https://oss-fuzz.com/testcase?key=4680255596003328 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-double-free Crash Address: 0xf4f0ccb0 Crash State: MagickFree ReadMETAIma...

GraphicsMagick ReadWPGImage Code Execution

The vulnerability of the ReadWPGImage function coders/wpg.c in the cross-platform library for working with graphics, GraphicsMagick, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WPG file...

GraphicsMagick coders/wpg.c Heap Buffer Overflow DoS

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...