CVE-2017-15741 - IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."

Back Back to CVE browser

HIGH

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."

Published Oct 22, 2017

7.8

HIGH

CVSS 3.0

EPSS 1.72%

Description

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Possible Stack Corruption starting at CADIMAGE+0x00000000003d2378."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-7164
Advisory
https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-7164		Advisory
https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15741		x_refsource_MISCThird Party Advisory