CVE-2024-6819

Summary

CVE-2024-6819 is a remote code execution vulnerability affecting IrfanView, a popular image viewing software. The issue lies in the parsing of PSP files, which allows attackers to write data beyond the allocated buffer. This flaw can be exploited when a user opens a specially crafted file or visits a malicious webpage, granting attackers the ability to execute arbitrary code in the context of the current process. User interaction is necessary to exploit this vulnerability, which was identified as ZDI-CAN-23219.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.