CVE-2017-15259: Buffer Overflow

Published Oct 11, 2017

Updated

IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x000000000011624a."

Affected Software

2 affected components

IrfanView PDF=4.43

IrfanView IrfanView=4.44

Event History

Oct 11, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15259?

CVE-2017-15259 has a severity rating that could potentially allow denial of service attacks.

How do I fix CVE-2017-15259?

To mitigate CVE-2017-15259, it is recommended to update to the latest version of IrfanView and its PDF plugin.

Which versions are affected by CVE-2017-15259?

CVE-2017-15259 affects IrfanView version 4.44 (32bit) and PDF plugin version 4.43.

What type of impact can CVE-2017-15259 have?

CVE-2017-15259 can cause a denial of service or possibly lead to unspecified other impacts.

Is there a known exploit for CVE-2017-15259?

While specific exploits are not detailed, the vulnerability is linked to processing crafted PDF files.