CVE-2024-11548

Summary

CVE-2024-11548 is a remote code execution vulnerability affecting IrfanView, specifically in its handling of DWG files. This issue arises due to insufficient validation of user-supplied data during file parsing, leading to an out-of-bounds write. A malicious actor can exploit this vulnerability by crafting a specially crafted DWG file or persuading a user to visit a malicious website. Successful exploitation allows the attacker to execute arbitrary code in the context of the current process. This vulnerability, originally identified as ZDI-CAN-24745, underscores the importance of proper input validation to prevent buffer overflow attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.