CVE-2024-11564

Summary

CVE-2024-11564 is a remote code execution vulnerability affecting IrfanView, a popular image viewer. The issue lies in the application's handling of DWG files, where insufficient validation of user-supplied data leads to memory corruption. This can allow attackers to execute arbitrary code on affected installations. Exploitation requires users to visit a malicious page or open a specially crafted file. The vulnerability, identified as ZDI-CAN-24864, underscores the importance of robust input validation in software to prevent memory corruption exploits.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.