Vulnerabilities (CVE)

Filtered by vendor Irfanview Subscribe
Filtered by product Irfanview
Total 192 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-46064 1 Irfanview 1 Irfanview 2024-02-14 6.8 MEDIUM 7.8 HIGH
IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image.
CVE-2023-26974 1 Irfanview 1 Irfanview 2023-04-11 N/A 5.5 MEDIUM
Irfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting at JPEG2000+0x0000000000001bf0.
CVE-2023-24304 1 Irfanview 1 Irfanview 2023-04-04 N/A 7.8 HIGH
Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file.
CVE-2020-23558 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
CVE-2020-23556 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
CVE-2020-23557 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
CVE-2020-23559 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
CVE-2020-23560 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
CVE-2020-23555 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
CVE-2020-23554 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.
CVE-2020-23553 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.
CVE-2020-23552 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.
CVE-2020-23551 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.
CVE-2020-23550 1 Irfanview 1 Irfanview 2022-09-19 N/A 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.
CVE-2020-23561 1 Irfanview 1 Irfanview 2022-07-25 N/A 5.5 MEDIUM
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.
CVE-2020-23562 1 Irfanview 1 Irfanview 2022-07-25 N/A 5.5 MEDIUM
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.
CVE-2020-23563 1 Irfanview 1 Irfanview 2022-07-22 N/A 5.5 MEDIUM
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.
CVE-2017-2813 1 Irfanview 1 Irfanview 2022-04-19 6.8 MEDIUM 7.8 HIGH
An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the image in via the application or by using thumbnailing feature of IrfanView.
CVE-2020-23545 1 Irfanview 1 Irfanview 2021-12-20 6.8 MEDIUM 7.8 HIGH
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.
CVE-2020-23567 1 Irfanview 1 Irfanview 2021-11-08 4.3 MEDIUM 5.5 MEDIUM
Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea"