Unscored CVE-2017-15252 EUVD-2017-6712GHSA-hq53-mv5v-6vc3

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a c…

Published Oct 11, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "Read Access Violation on Block Data Move starting at PDF!xmlListWalk+0x00000000000158cb."

References

https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15252