moshekaplan/Research

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-29360 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29361 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29362 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29363 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74
CVE-2021-29364 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29365 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	5.5 MEDIUM	4.3 MEDIUM
Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS).
CVE-2021-29366 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVE-2021-29367 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	7.8 HIGH	6.8 MEDIUM
A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file.
CVE-2021-29358 ↗	Sep 28, 2021Tuesday, 28 September 2021, 16:15	5.5 MEDIUM	4.3 MEDIUM
A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of service (DOS) via a crafted PVR file.