CVE-2024-11533

Summary

CVE-2024-11533 is a remote code execution vulnerability affecting IrfanView. This issue occurs during the parsing of DXF files, where a lack of proper validation of user-supplied data results in an out-of-bounds write. An attacker can exploit this vulnerability by crafting a malicious DXF file and convincing the target to open it or visit a malicious webpage. Successful exploitation allows the attacker to execute arbitrary code in the context of the current process. This vulnerability, originally reported as ZDI-CAN-24616, poses a significant risk to systems running IrfanView and requires prompt attention from administrators.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.