CVE-2017-15757: Buffer Overflow

Published Oct 22, 2017
·
Updated

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at BabaCAD4Image!ShowPlugInOptions+0x00000000000029ba."

Affected Software

2 affected components
IrfanView Irfanview X64=4.50
IrfanView BabaCAD4Image=1.3

Event History

Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2017-15757?

CVE-2017-15757 has a medium severity level, as it can lead to denial of service and possibly other unspecified impacts.

2

How do I fix CVE-2017-15757?

To mitigate CVE-2017-15757, ensure that you are using a non-vulnerable version of IrfanView and the BabaCAD4Image plugin.

3

What types of systems are affected by CVE-2017-15757?

CVE-2017-15757 affects IrfanView 4.50 - 64bit specifically when used with BabaCAD4Image plugin version 1.3.

4

What can attackers achieve with CVE-2017-15757?

Attackers can exploit CVE-2017-15757 to cause a denial of service condition via crafted .dwg files.

5

Is there any known exploit code for CVE-2017-15757?

Currently, there is no public exploit code available for CVE-2017-15757, but users should still exercise caution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203