Arbitrary Code Execution Vulnerability in IrfanView PDF Plugin
CVE-2017-15257

7.8HIGH

Key Information:

Vendor

Irfanview
Status
PDF
Irfanview
Vendor
CVE Published:
11 October 2017

What is CVE-2017-15257?

A vulnerability in IrfanView version 4.44 (32bit) with the PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service. This can occur when processing specially crafted PDF files, as the application fails to properly validate input before executing subsequent operations that control the flow of code.

References

https://github.com/wlinzi/security_advisories/tree/master...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.