Design/Logic Flaw

IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!ReadBadPNG+0x0000000000000101...

CVE-2019-17258

CVE-2019-17258 affects IrfanView 4.53. The vulnerability arises in a faulting-address control that lets an attacker influence a subsequent write address starting at JPEG_LS+0x839c, enabling memory corruption. Reported impact indicates high confidentiality, integrity, and availability risks (per C...

CVE-2019-17254

IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!ReadBadPNG+0x0000000000000101...

Design/Logic Flaw

In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc...

CVE-2019-16887

Affected software: IrfanView 4.53 and earlier. The issue is described as data from a faulting address that controls a subsequent write address at image00400000+0x000000000001dcfc, indicating a memory handling flaw. Related sources frame this as a buffer/heap overflow risk and, in some summaries, ...

The vulnerability of the mendex application, which is part of the TeX Live computer typesetting system, allows a hacker to cause a service failure.

The vulnerability of the mendex application, which is part of the TeX Live computer typesetting system, is related to overflow errors during the processing of command lines. Exploiting this vulnerability can allow an attacker to cause a service failure by sending commands with specially crafted...

CVE-2017-14690

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7."...

CVE-2017-14296

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e6."...

CVE-2017-14301

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllUnregisterServer+0x00000000000076d3."...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls subsequent Write Address starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a525."...