CVE-2024-11508

Summary

CVE-2024-11508 is a remote code execution vulnerability affecting IrfanView, a popular image viewer software. Malicious DXF files can be used to exploit this issue, which arises from insufficient data validation during file parsing. The flaw leads to a type confusion condition, enabling attackers to execute arbitrary code in the context of the current process. User interaction, such as visiting a malicious webpage or opening a tainted file, is required to exploit this vulnerability. This issue was identified as ZDI-CAN-22184 in the Zero Day Initiative database.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.