CVE Feed

    Dashboard / CVE / CVE-2017-15762

    CVE-2017-15762

    IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b."

    Published:Oct 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 22, 2017
    EPSS Score:0.00364
    CVSS Score:7.8

    Affected Products

    Vendor
    Irfanview
    Product
    Babacad4image
    Vendor
    Irfanview
    Product
    Irfanview

    Exploits

    No exploit reference

    Related CVEs

    CVE-2017-15750 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or …
    CVE-2017-15756 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cau…
    CVE-2017-15757 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or …
    CVE-2017-15764 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or …
    CVE-2017-15763 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cau…
    CVE-2017-15751 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or …
    CVE-2017-15752 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cau…
    CVE-2017-15753 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or …
    CVE-2017-15754 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cau…
    CVE-2017-15755 (CVSS 7.8) — IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High