Denial of Service Vulnerability in IrfanView PDF Plugin by IrfanView
CVE-2017-15259

7.8HIGH

Key Information:

Vendor

Irfanview
Status
PDF
Irfanview
Vendor
CVE Published:
11 October 2017

What is CVE-2017-15259?

A denial of service vulnerability exists in IrfanView version 4.44 (32bit) when used with PDF plugin version 4.43. This flaw can be exploited via specially crafted PDF files, which may trigger unexpected behavior or crashes in the application. Attackers can leverage this vulnerability to interrupt services and affect user experience, making it essential for users to apply patches and updates to safeguard against potential exploitation.

References

https://github.com/wlinzi/security_advisories/tree/master...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.