CVE-2017-15755

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3

Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file. It is related to "Data from Faulting Address controls Branch Selection starting at verifier!AVrfpDphFindBusyMemoryNoCheck+0x0000000000000091."

Recommendations For IrfanView version 4.50 with BabaCAD4Image plugin version 1.3, consider avoiding the use of crafted .dwg files until a patch is available. As a temporary workaround, restrict the opening of .dwg files in IrfanView to minimize the risk of exploitation.