CVE-2024-11571

Summary

CVE-2024-11571 is a remote code execution vulnerability affecting IrfanView's handling of DXF files. The issue arises due to insufficient validation of user-supplied data during file parsing, resulting in an out-of-bounds read. An attacker can exploit this vulnerability by causing the software to read past the designated buffer, leading to the execution of arbitrary code in the context of the current process. User interaction is necessary for exploitation, as the target must visit a malicious webpage or open a specially crafted file. This vulnerability, originally identified as ZDI-CAN-24895, poses a significant risk to IrfanView users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.