NetSight
high7.8

CVE-2017-15249

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re…

Impact

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlGetGlobalState+0x00000000000668d6."

Affected products

VendorProductAffected versions
IrfanviewIrfanview
Version 4.44
IrfanviewPdf
Version 4.43

Weakness classification

References