CVE-2024-11547

Summary

CVE-2024-11547 is a remote code execution vulnerability affecting IrfanView, specifically in its handling of DWG files. Malicious files or websites can exploit this issue, which arises from insufficient data validation during parsing. The vulnerability results in memory corruption, allowing attackers to execute code in the context of the current process. User interaction is required for an attack to be successful. This vulnerability was originally identified as ZDI-CAN-24732.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.