CVE-2024-11550

Summary

CVE-2024-11550 is a remote code execution vulnerability affecting IrfanView, a popular image viewer software. The flaw is located in the DXF file parsing function, where insufficient validation of user-supplied data results in an out-of-bounds write condition. This vulnerability allows attackers to execute arbitrary code on targeted installations, requiring the user to visit a malicious webpage or open a maliciously crafted file. The flaw, identified as ZDI-CAN-24748, provides an opportunity for attackers to gain control of the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.