CVE-2017-15257: Buffer Overflow

Published Oct 11, 2017

Updated

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at PDF!xmlParserInputRead+0x000000000009174a."

Affected Software

2 affected components

IrfanView PDF=4.43

IrfanView IrfanView=4.44

Event History

Oct 11, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15257?

CVE-2017-15257 is rated as high severity due to its potential to execute arbitrary code and cause denial of service.

How do I fix CVE-2017-15257?

To fix CVE-2017-15257, upgrade IrfanView to version 4.44 or later and ensure the PDF plugin is updated to the latest version.

What versions are affected by CVE-2017-15257?

CVE-2017-15257 affects IrfanView version 4.44 (32bit) and PDF plugin version 4.43.

What type of attacks does CVE-2017-15257 allow?

CVE-2017-15257 allows attackers to execute arbitrary code or cause a denial of service through crafted PDF files.

Is CVE-2017-15257 specific to a certain file format?

Yes, CVE-2017-15257 specifically affects files in the PDF format.