KLA11016 Denial of service vulnerability in IrfanView

An improper processing of .FPX (FlashPix) files was found in IrfanView 4.44 (32-bit) with FPX Plugin before 4.45. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited remotely via a specially designed .FPX file.

Original advisories

IrfanView PlugIns

Related products

IrfanView

CVE list

CVE-2017-7721 high

Solution

Update to the latest version

Download IrfanView

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• IrfanView 4.44 (32-bit) with FPX Plugin before 4.45