Unscored CVE-2017-15262 EUVD-2017-6722GHSA-8mxf-jjr3-r9ff

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a c…

Published Oct 11, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x0000000000048d0c."

References

https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15262