Denial of Service and Code Execution Vulnerability in IrfanView Tools Plugin
CVE-2017-9920

7.8HIGH

Key Information:

Vendor

Irfanview
Status
Irfanview
Tools
Vendor
CVE Published:
5 July 2017

What is CVE-2017-9920?

A vulnerability exists in IrfanView version 4.44 (32bit) when used with TOOLS Plugin version 4.50, which may allow attackers to perform a denial of service or execute arbitrary code. This vulnerability is triggered by the handling of crafted files and is linked to improper resource handling during execution. Exploitation of this issue could lead to significant disruptions and compromise the integrity of the affected systems, emphasizing the need for immediate attention and mitigation strategies.

References

https://github.com/wlinzi/security_advisories/tree/master...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.