CVE-2017-15243: Buffer Overflow

Published Oct 11, 2017

Updated

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x00000000000568a4."

Affected Software

2 affected components

IrfanView IrfanView=4.44

IrfanView PDF=4.43

Event History

Oct 11, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15243?

CVE-2017-15243 has been assessed as a high-severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2017-15243?

To fix CVE-2017-15243, update IrfanView to version 4.45 or later and ensure the PDF plugin is also updated.

What versions are affected by CVE-2017-15243?

CVE-2017-15243 affects IrfanView version 4.44 (32bit) and PDF plugin version 4.43.

What types of attacks are possible with CVE-2017-15243?

CVE-2017-15243 allows attackers to potentially cause a denial of service or other unspecified impacts.

What is the nature of the vulnerability in CVE-2017-15243?

CVE-2017-15243 involves a possible stack corruption vulnerability triggered by a specially crafted PDF file.