CVE-2017-15251: Buffer Overflow

Published Oct 11, 2017

Updated

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x00000000000e7326."

Affected Software

2 affected components

IrfanView IrfanView=4.44

IrfanView PDF=4.43

Event History

Oct 11, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15251?

CVE-2017-15251 is classified as a high-severity vulnerability that allows attackers to execute arbitrary code or cause denial of service.

How do I fix CVE-2017-15251?

To fix CVE-2017-15251, users should update IrfanView to version 4.44 or later and ensure the PDF plugin is updated as well.

What versions are affected by CVE-2017-15251?

CVE-2017-15251 affects IrfanView version 4.44 (32bit) and PDF plugin version 4.43.

What type of attack is possible with CVE-2017-15251?

CVE-2017-15251 allows for potential arbitrary code execution or denial of service through maliciously crafted PDF files.

Is CVE-2017-15251 related to other vulnerabilities?

CVE-2017-15251 is related to vulnerabilities involving improper handling of crafted PDF files, which may lead to serious security risks.