PT-2017-13514
CVE-2017-14539
·
Published
2017-09-18
·
Updated
2017-11-04
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IrfanView versions 4.44
Description
The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file. It is related to "Data from Faulting Address controls Branch Selection starting at image00000000 00400000+0x000000000011d767."
Recommendations
For IrfanView version 4.44, consider avoiding the use of .svg files until a patch or fix is available. As a temporary workaround, restrict the opening of .svg files in IrfanView to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾