CVE-2024-5877

Summary

CVE-2024-5877 is a remote code execution vulnerability affecting IrfanView. Malicious PIC files can be used to exploit this issue, requiring user interaction. The root cause lies in insufficient validation of user-supplied data during PIC file parsing, leading to an out-of-bounds write condition. Attackers can capitalize on this vulnerability to execute arbitrary code in the context of the current process. This vulnerability, identified as ZDI-CAN-23974, underscores the importance of proper data validation and secure handling of user-supplied input.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.