CVE-2024-11572

Summary

CVE-2024-11572 is a remote code execution vulnerability affecting IrfanView, caused by insufficient validation of user-supplied data during DXF file parsing. This issue results in memory corruption, allowing attackers to execute arbitrary code on affected systems. Exploitation necessitates user interaction, such as visiting a malicious webpage or opening a maliciously crafted file. IrfanView's DXF file handling function, ZDI-CAN-24897, is the source of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.