CVE-2024-11525

Summary

CVE-2024-11525 is a remote code execution vulnerability in IrfanView's DXF file parsing functionality. This issue arises due to a lack of object validation, enabling attackers to execute arbitrary code on affected systems. User interaction is necessary for exploitation, either through a specially crafted web page or malicious file. The vulnerability, identified as ZDI-CAN-24599, allows an attacker to manipulate the memory of the affected process and gain control for code execution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.