Vulnerability Description
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at CADIMAGE+0x00000000003e9462."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Irfanview | Irfanview | 4.50 |
| Irfanview | Cadimage | 12.0.0.5 |
Related Weaknesses (CWE)
References
- https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765Third Party Advisory
- https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15765Third Party Advisory
FAQ
What is CVE-2017-15765?
CVE-2017-15765 is a vulnerability with a CVSS score of 7.8 (HIGH). IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faul...
How severe is CVE-2017-15765?
CVE-2017-15765 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-15765?
Check the references section above for vendor advisories and patch information. Affected products include: Irfanview Irfanview, Irfanview Cadimage.