Denial of Service Vulnerability in IrfanView PDF Plugin by Irfan Skiljan
CVE-2017-15244

7.8HIGH

Key Information:

Vendor

Irfanview
Status
Irfanview
PDF
Vendor
CVE Published:
11 October 2017

What is CVE-2017-15244?

IrfanView version 4.44 (32bit) with the PDF plugin version 4.43 is susceptible to a denial of service attack. This vulnerability occurs when a specially crafted PDF file is processed by the software, potentially causing system instability or unintended application behavior. The issue is related to an error code that may disrupt normal operations, highlighting the need for users to ensure that they are utilizing updated and secured versions of the software to mitigate risks.

References

https://github.com/wlinzi/security_advisories/tree/master...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.