CVE-2024-11521

Summary

CVE-2024-11521 is a remote code execution vulnerability affecting IrfanView, caused by a flaw in the DJVU file parsing process. The issue arises when the software fails to validate the existence of an object before performing operations on it, allowing attackers to execute arbitrary code in the context of the current process. To exploit this vulnerability, users must visit a malicious page or open a maliciously crafted file. This vulnerability, identified as ZDI-CAN-24578, can have serious consequences if not addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.