CVE-2017-9881: Buffer Overflow
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to "Data from Faulting Address controls Code Flow starting at FPX!FPXGetScanDevicePropertyGroup+0x00000000000014e7."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9881?
CVE-2017-9881 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2017-9881?
To fix CVE-2017-9881, update IrfanView and the FPX plugin to the latest versions as provided by the vendor.
What software versions are affected by CVE-2017-9881?
CVE-2017-9881 affects IrfanView version 4.44 and the FPX Plugin version 4.46.
What types of attacks can exploit CVE-2017-9881?
CVE-2017-9881 can be exploited to execute arbitrary code or cause a denial of service through a specially crafted .fpx file.
Is there a workaround for CVE-2017-9881?
The best workaround for CVE-2017-9881 is to avoid opening .fpx files from untrusted sources until the software is updated.