CVE-2017-9535: Buffer Overflow
Published Jul 5, 2017
·Updated
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000016e53."
Affected Software
2 affected components
IrfanView IrfanView=4.44
IrfanView FPX=4.46
Event History
Jul 5, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9535?
CVE-2017-9535 is considered to have a critical severity level due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2017-9535?
To fix CVE-2017-9535, update IrfanView to version 4.45 or newer and ensure the FPX Plugin is also updated.
3
Which versions of IrfanView are affected by CVE-2017-9535?
IrfanView version 4.44 (32bit) is affected by CVE-2017-9535.
4
What type of exploit does CVE-2017-9535 represent?
CVE-2017-9535 represents a vulnerability that can lead to arbitrary code execution and denial of service via a crafted .fpx file.
5
Is there a workaround for CVE-2017-9535?
There is no official workaround for CVE-2017-9535, so updating to the latest version is recommended.