CVE-2017-14540

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.44

Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e."

Recommendations For IrfanView version 4.44, avoid using the software to open .svg files from untrusted sources until a fix is available. As a temporary workaround, consider disabling the .svg file format support in IrfanView to minimize the risk of exploitation.