CVE-2017-15759

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3

Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. This is related to a "User Mode Write AV near NULL" error, specifically at the ShowPlugInOptions+0x000000000001b3f3 location in the BabaCAD4Image plugin.

Recommendations For IrfanView version 4.50 with BabaCAD4Image plugin version 1.3, consider disabling the BabaCAD4Image plugin until a patch is available to prevent potential exploitation.