CVE-2024-9112

Summary

CVE-2024-9112 is a remote code execution vulnerability affecting FastStone Image Viewer. The issue stems from an out-of-bounds write flaw in the application's handling of PSD files. The vulnerability arises due to insufficient validation of user-supplied data, enabling attackers to write data past the end of an allocated object. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. Successful exploitation grants the attacker the ability to execute arbitrary code in the context of the current process. This vulnerability, originally identified as ZDI-CAN-25102, poses a significant risk to systems running FastStone Image Viewer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.