Unscored CVE-2017-15253 EUVD-2017-6713GHSA-q5qq-cr47-c576

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a c…

Published Oct 11, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "User Mode Write AV starting at PDF!xmlGetGlobalState+0x000000000007dff2."

References

https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15253