Vulnerabilities > Irfanview > PDF > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-10-11 CVE-2017-15243 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview and PDF
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Possible Stack Corruption starting at PDF!xmlGetGlobalState+0x00000000000568a4."
network
irfanview CWE-119
6.8
2017-10-11 CVE-2017-15242 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview and PDF
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to a "User Mode Write AV starting at PDF!xmlGetGlobalState+0x0000000000031abe."
network
irfanview CWE-119
6.8
2017-10-11 CVE-2017-15241 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview and PDF
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address controls Branch Selection starting at PDF!xmlParserInputRead+0x00000000000929f5."
network
irfanview CWE-119
6.8
2017-10-11 CVE-2017-15240 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview and PDF
IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access Violation starting at PDF!xmlParserInputRead+0x0000000000132cef."
network
irfanview CWE-119
6.8
2017-10-11 CVE-2017-15239 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview and PDF
IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Address may be used as a return value starting at PDF!xmlParserInputRead+0x0000000000040db4."
network
irfanview CWE-119
6.8