CVE-2024-6817

Summary

CVE-2024-6817 is a remote code execution vulnerability affecting IrfanView. This issue arises from insufficient validation of user-supplied data during the parsing of PSP files, leading to an out-of-bounds write. For an attack to be successful, users must visit a malicious webpage or open a specially crafted file. The vulnerability, identified as ZDI-CAN-23216, permits an attacker to execute code in the context of the affected IrfanView installation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.