CVE-2024-11522

Summary

CVE-2024-11522 is a remote code execution vulnerability affecting IrfanView, specifically in its DXF file parsing functionality. The issue arises from insufficient validation of user-supplied data, enabling memory corruption. By exploiting this vulnerability, attackers can execute arbitrary code in the context of the current process. User interaction, such as visiting a malicious webpage or opening a malicious file, is necessary for successful exploitation. This vulnerability, identified as ZDI-CAN-24595, underscores the importance of proper data validation and secure file handling.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.