CVE-2024-11530

Summary

CVE-2024-11530 is a remote code execution vulnerability affecting IrfanView, a popular image viewer software. The flaw, identified as ZDI-CAN-24605, resides in the application's handling of CGM (Corel Graphics Metafile) files. It arises due to insufficient data validation during parsing, resulting in a memory corruption condition. An attacker can exploit this vulnerability by crafting a malicious CGM file or hosting it on a specially crafted webpage. Successful exploitation grants the attacker the ability to execute arbitrary code on the affected system, requiring only user interaction to open the malicious file or visit the malicious page.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.