CVE-2017-15258: Buffer Overflow

Published Oct 11, 2017

Updated

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000161a9c."

Affected Software

2 affected components

IrfanView PDF=4.43

IrfanView IrfanView=4.44

Event History

Oct 11, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15258?

CVE-2017-15258 has a severity level that could lead to denial of service and potentially other unspecified impacts.

How do I fix CVE-2017-15258?

To fix CVE-2017-15258, you should update IrfanView to version 4.44 and ensure the PDF plugin is upgraded to the latest version.

What versions are affected by CVE-2017-15258?

CVE-2017-15258 affects IrfanView version 4.44 (32bit) with PDF plugin version 4.43.

What type of attack is associated with CVE-2017-15258?

CVE-2017-15258 is associated with a denial of service attack via crafted PDF files.

Can CVE-2017-15258 lead to data loss?

While CVE-2017-15258 primarily causes denial of service, it may also introduce other unspecified impacts that could risk data integrity.