CVE-2017-15763

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3

Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. It is related to "Data from Faulting Address controls subsequent Write Address starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001eca0."

Recommendations For IrfanView version 4.50 with BabaCAD4Image plugin version 1.3, consider disabling the BabaCAD4Image plugin until a patch is available to prevent potential exploitation.