CVE-2017-15754

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3

Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL" error. This error occurs at the ShowPlugInOptions+0x0000000000013968 location in the BabaCAD4Image plugin.

Recommendations For IrfanView version 4.50 with BabaCAD4Image plugin version 1.3, consider disabling the BabaCAD4Image plugin until a patch is available to prevent potential exploitation.