CVE-2024-11543

Summary

CVE-2024-11543 is a remote code execution vulnerability affecting IrfanView, specifically in its DXF file parsing process. This issue arises due to insufficient data validation, allowing memory corruption. Attackers can exploit this by crafting malicious DXF files or webpages, leading to arbitrary code execution in the context of the victim's IrfanView instance. No user interaction is required for the exploit to take effect, making it potentially dangerous. (ZDI-CAN-24704)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.