CVE-2017-9922: Buffer Overflow

Published Jul 5, 2017

Updated

IrfanView version 4.44 (32bit) with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpCompareResourceNamesU+0x0000000000000062."

Affected Software

2 affected components

IrfanView IrfanView=4.44

IrfanView TOOLS=4.50

Event History

Jul 5, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-9922?

CVE-2017-9922 has a high severity rating due to its potential to cause a denial of service or execute arbitrary code.

How do I fix CVE-2017-9922?

To fix CVE-2017-9922, update IrfanView to the latest version and ensure that the TOOLS Plugin is also updated.

What versions are affected by CVE-2017-9922?

CVE-2017-9922 affects IrfanView version 4.44 (32bit) and TOOLS Plugin version 4.50.

What types of attacks can CVE-2017-9922 enable?

CVE-2017-9922 can enable attackers to execute arbitrary code or cause a denial of service through crafted files.

Is CVE-2017-9922 related to specific software components?

CVE-2017-9922 is related to the IrfanView application and its TOOLS Plugin, indicating a vulnerability within these components.