CVE-2024-11560

Summary

CVE-2024-11560 is a remote code execution vulnerability affecting IrfanView. This issue arises during the parsing of DXF files and is caused by insufficient validation of user-supplied data. Attackers can exploit this memory corruption vulnerability by inducing a target to visit a malicious website or open a maliciously crafted file. Successful exploitation grants the attacker the ability to execute arbitrary code in the context of the affected IrfanView installation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.