CVE-2024-6815

Summary

CVE-2024-6815 is a Remote Code Execution vulnerability affecting IrfanView. This issue arises due to inadequate validation of user-supplied data during RLE file parsing, leading to an Out-of-Bounds Write condition. An attacker can exploit this flaw by crafting a malicious RLE file, which when opened, allows them to execute arbitrary code on the affected system. User interaction is necessary as the target must visit a malicious website or open the malicious file to trigger the exploitation of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.