Skip to main content

Vendor archive

irfanview CVEs

Beta · best-effort

381 CVEs tagged to vendor irfanview11 Critical, 346 High, 22 Medium, 2 Low, 0 Unrated.

CVE-2020-23562

Published Jul 18, 2022

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2020-23561

Published Jul 18, 2022

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-46064

Published Mar 23, 2022

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .ti…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-23545

Published Dec 15, 2021

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-23567

Published Nov 5, 2021

Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_…

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2020-23566

Published Nov 5, 2021

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2020-23565

Published Nov 5, 2021

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!Sh…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-23549

Published Oct 28, 2021

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Address controls Branc…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-23546

Published Oct 28, 2021

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29367

Published Sep 28, 2021

A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29366

Published Sep 28, 2021

A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29365

Published Sep 28, 2021

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS).

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-29364

Published Sep 28, 2021

A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29363

Published Sep 28, 2021

A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29362

Published Sep 28, 2021

A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29361

Published Sep 28, 2021

A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29360

Published Sep 28, 2021

A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2021-29358

Published Sep 28, 2021

A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of service (DOS) via a crafted PVR file.

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-27362

Published Feb 17, 2021

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to ex…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2021-27224

Published Feb 17, 2021

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2020-35133

Published Dec 16, 2020

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at i_view32+0xdb60.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2020-13906

Published Jun 10, 2020

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-13905

Published Jun 10, 2020

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2019-17258

Published Oct 8, 2019

IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x000000000000839c.

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort
Showing 201-225 of 381 CVEsPage 9 of 16