CVE-2024-6818

Summary

CVE-2024-6818 is a remote code execution vulnerability affecting IrfanView, specifically in its handling of PSP files. The flaw arises due to insufficient validation of user-supplied data during file parsing, leading to an out-of-bounds write condition. An attacker can exploit this vulnerability by crafting a malicious PSP file, causing IrfanView to write data beyond the intended buffer. Successful exploitation requires user interaction, such as opening the malicious file or visiting a compromised website. The vulnerability, originally discovered and reported as ZDI-CAN-23217, can allow an attacker to execute arbitrary code in the context of the IrfanView process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.