Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-07-05 CVE-2017-9534 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview FPX and Irfanview
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-9533 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview FPX and Irfanview
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DE_Decode+0x0000000000000a9b."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-9532 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview FPX and Irfanview
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x0000000000001555."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-9531 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview FPX and Irfanview
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX+0x000000000000176c."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-9530 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview and Tools
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at ntdll_77df0000!LdrpResCompareResourceNames+0x0000000000000150."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-9529 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Xnview 2.40
XnView Classic for Windows Version 2.40 allows remote attackers to execute code via a crafted .fpx file, related to a "User Mode Write AV starting at Xfpx+0x0000000000004efd."
local
low complexity
xnview CWE-119
7.8
2017-07-05 CVE-2017-9528 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Irfanview FPX and Irfanview
IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x0000000000000f53."
local
low complexity
irfanview CWE-119
7.8
2017-07-05 CVE-2017-8826 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpeg_mem_term function in jmemnobs.c in libjpeg.
local
low complexity
faststone CWE-119
7.8
2017-07-05 CVE-2017-8803 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mh-Nexus HEX Editor 0.9.5
Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted file, because of a "Data from Faulting Address controls Code Flow" issue.
local
low complexity
mh-nexus CWE-119
7.8
2017-07-05 CVE-2017-8785 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Faststone Image Viewer 6.2
FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue.
local
low complexity
faststone CWE-119
7.8