CVE-2017-15762

HIGH 7.8CVE-2017-15762 · Published 22/10/2017 · updated 17/06/2026

In short

CVE-2017-15762 is a HIGH (CVSS 7.8) vulnerability affecting babacad4image (irfanview), irfanview (irfanview).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
babacad4image irfanview	`= 1.3`	No fix yet
irfanview irfanview	`= 4.50`	No fix yet

Description

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001f31b."

References

wlinzi/security_advisories · Third Party Advisory

More vulnerabilities in babacad4image

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

babacad4image

irfanview

= 1.3

No fix yet

irfanview

= 4.50

No fix yet

More vulnerabilities in babacad4image

See all →