CVE-2024-11539

Summary

CVE-2024-11539 is a remote code execution vulnerability affecting IrfanView, caused by insufficient validation of user-supplied data during DXF file parsing. This issue results in memory corruption, which an attacker can exploit by forcing a user to visit a malicious webpage or open a specially crafted file. Successful exploitation grants the attacker the ability to execute arbitrary code within the context of the IrfanView application. The vulnerability, identified as ZDI-CAN-24699, underscores the importance of proper input validation in handling user data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.