CVE-2024-11513

Summary

CVE-2024-11513 is a newly discovered vulnerability in IrfanView that allows remote code execution. This issue is caused by a heap-based buffer overflow in the ECW file parsing process. Attackers can exploit this vulnerability by creating malicious ECW files or malicious web pages. The flaw arises due to insufficient validation of user-supplied data before copying it to a buffer. Successful exploitation grants the attacker the ability to execute arbitrary code in the context of the current process. This vulnerability was reported as ZDI-CAN-23971.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.