Irfanview
Page 3 of 4 — Irfanview CVEs from a corpus of 319, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-23562 | Medium | 5.5 | 2022-07-18 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe. |
CVE-2020-23561 | Medium | 5.5 | 2022-07-18 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722. |
CVE-2021-46064 | High | 7.8 | 2022-03-23 | IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user… |
CVE-2020-23545 | High | 7.8 | 2021-12-15 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531. |
CVE-2020-23567 | Medium | 5.5 | 2021-11-05 | Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!Sh… |
CVE-2020-23566 | Medium | 5.5 | 2021-11-05 | Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8. |
CVE-2020-23565 | High | 7.8 | 2021-11-05 | Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection sta… |
CVE-2020-23549 | High | 7.8 | 2021-10-28 | IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Ad… |
CVE-2020-23546 | High | 7.8 | 2021-10-28 | IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Add… |
CVE-2021-29367 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file. |
CVE-2021-29366 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. |
CVE-2021-29365 | Medium | 5.5 | 2021-09-28 | Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS). |
CVE-2021-29364 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. |
CVE-2021-29363 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74 |
CVE-2021-29362 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. |
CVE-2021-29361 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. |
CVE-2021-29360 | High | 7.8 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. |
CVE-2021-29358 | Medium | 5.5 | 2021-09-28 | A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of service (DOS) via a crafted PVR file. |
CVE-2021-27362 | Critical | 9.8 | 2021-02-17 | The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow re… |
CVE-2021-27224 | High | 7.5 | 2021-02-17 | The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers… |
CVE-2020-35133 | High | 7.5 | 2020-12-16 | irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32+0xdb60. |
CVE-2020-13906 | High | 7.8 | 2020-06-10 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7. |
CVE-2020-13905 | High | 8.8 | 2020-06-10 | IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4. |
CVE-2013-3486 | Critical | 9.6 | 2020-01-27 | IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability |
CVE-2013-3946 | High | 7.8 | 2020-01-02 | Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header. |
CVE-2013-3945 | High | 7.8 | 2020-01-02 | The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag. |
CVE-2013-3944 | High | 7.8 | 2020-01-02 | Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag. |
CVE-2019-17258 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x000000000000839c. |
CVE-2019-17257 | Medium | 5.5 | 2019-10-08 | IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80. |
CVE-2019-17256 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at DPX!ReadDPX_W+0x0000000000001203. |
CVE-2019-17255 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836. |
CVE-2019-17254 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!Read_BadPNG+0x0000000000000101. |
CVE-2019-17253 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at JPEG_LS+0x000000000000a6b8. |
CVE-2019-17252 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!Read_BadPNG+0x0000000000000115. |
CVE-2019-17251 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43. |
CVE-2019-17250 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000042f5. |
CVE-2019-17249 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d57b. |
CVE-2019-17248 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000025b6. |
CVE-2019-17247 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x0000000000007da8. |
CVE-2019-17246 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c. |
CVE-2019-17245 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x0000000000004359. |
CVE-2019-17244 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000001d8a. |
CVE-2019-17243 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000003155. |
CVE-2019-17242 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000966f. |
CVE-2019-17241 | High | 7.8 | 2019-10-08 | IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d563. |
CVE-2019-16887 | High | 7.8 | 2019-09-25 | In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc. |
CVE-2019-13243 | High | 7.8 | 2019-07-04 | IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6. |
CVE-2019-13242 | High | 7.8 | 2019-07-04 | IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98. |
CVE-2017-15769 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access… |
CVE-2017-15768 | High | 7.8 | 2017-10-22 | IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Dat… |
CVE-2017-15767 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15766 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15765 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15764 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15763 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15762 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15761 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15760 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15759 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15758 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15757 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15756 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15755 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15754 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15753 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15752 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15751 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15750 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15749 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15748 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15747 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15746 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15745 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15744 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15743 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15742 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15741 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15740 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15739 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15738 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15737 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15264 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Dat… |
CVE-2017-15263 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15262 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15261 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15260 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15259 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15258 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15257 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15256 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15255 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15254 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15253 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15252 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15251 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15250 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15249 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15248 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |
CVE-2017-15247 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft… |
CVE-2017-15246 | High | 7.8 | 2017-10-11 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, re… |