Medium WID-SEC-2022-0818 14 CVEs

Irfan Skiljan IrfanView: Schwachstelle ermöglicht Denial of Service

Published Jul 24, 2022 · Updated Mar 30, 2023 · Revision 5 · de-DE

Vendor: Irfan Skiljan Product: IrfanView 4.54 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Irfan Skiljan IrfanView ausnutzen, um einen Denial of Service Angriff durchzuführen oder weitere undefinierte Auswirkungen zu erzielen.

Product

IrfanView ist ein Bildbetrachter für Windows.

Vulnerabilities 14

Unscored —

CVE-2020-23550

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.

Sep 16, 2022
Unscored —

CVE-2020-23551

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.

Sep 16, 2022
Unscored —

CVE-2020-23552

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.

Sep 16, 2022
Unscored —

CVE-2020-23553

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.

Sep 16, 2022
Unscored —

CVE-2020-23554

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.

Sep 16, 2022
Unscored —

CVE-2020-23555

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.

Sep 16, 2022
Unscored —

CVE-2020-23556

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.

Sep 16, 2022
Unscored —

CVE-2020-23557

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.

Sep 16, 2022
Unscored —

CVE-2020-23558

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.

Sep 16, 2022
Unscored —

CVE-2020-23559

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.

Sep 16, 2022
Unscored —

CVE-2020-23560

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.

Sep 16, 2022
Unscored —

CVE-2020-23561

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.

Jul 17, 2022
Unscored —

CVE-2020-23562

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.

Jul 17, 2022
Unscored —

CVE-2020-23563

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.

Jul 17, 2022

Revision history

2023-03-30 #5
Korrektur Plattformauswahl
2022-09-15 #4
CVE's ergänzt
2022-08-08 #3
CVE ergänzt
2022-07-25 #2
Link zur IrfanView Plugins Seite ergänzt
2022-07-24 #1
Initiale Fassung

References

NIST Database vom 2022-07-24
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-23563