CVE-2024-5875

Summary

CVE-2024-5875 is a remote code execution vulnerability affecting IrfanView. This issue arises from an out-of-bounds write in the application's SHP file parsing functionality. The lack of proper validation of user-supplied data enables an attacker to write data beyond the allocated buffer, resulting in code execution in the context of the current process. Exploitation requires user interaction, such as visiting a malicious webpage or opening a maliciously crafted file. This vulnerability, also known as ZDI-CAN-23972, can lead to significant security risks if left unaddressed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.