Unscored CVE-2017-15249 EUVD-2017-6709GHSA-g68c-q8jf-x5f9

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a c…

Published Oct 11, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x00000000000668d6."

References

https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15249