CVE-2024-11535

CVE-2024-11535 affects IrfanView with an out-of-bounds read while parsing DXF files, leading to remote code execution. The flaw arises from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer. Exploitation requires user interaction (target opens a ma...

CVE-2024-11535 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11536 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11536

CVE-2024-11536 describes an out-of-bounds read in IrfanView’s DXF file parsing that enables remote code execution after a user opens a malicious DXF file or visits a malicious page. The root cause is insufficient validation while parsing DXF data, enabling a read past the end of an allocated buff...

CVE-2024-11536 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11537 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11537 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11537

CVE-2024-11537 concerns IrfanView’s DXF file parsing, where lack of proper validation causes an out-of-bounds read. This vulnerability can lead to remote code execution in the context of the affected process. Exploitation requires user interaction (visiting a malicious page or opening a malicious...

CVE-2024-11554

CVE-2024-11554 affects IrfanView (DWG parsing) with an out-of-bounds write vulnerability caused by insufficient validation of DWG data. The flaw can lead to remote code execution in the context of the current process and requires user interaction (target must open a malicious file or visit a mali...

CVE-2024-11554 IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11554 IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11520 IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11520

IrfanView ARW file parsing is affected by an out-of-bounds write that can be exploited to execute arbitrary code. The issue arises from insufficient validation of ARW data during parsing, enabling a write past the end of an allocated object. Exploitation requires user interaction (the target must...

CVE-2024-11520 IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11521 IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability

IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11521

The CVE-2024-11521 entry describes an IrfanView DJVU file parsing Use-After-Free remote code execution vulnerability. Affected software: IrfanView (DJVU parsing path). Root cause: the parser performs operations on an object without validating its existence, enabling manipulation leading to code e...

CVE-2024-11521 IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability

IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11560 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11560

CVE-2024-11560 concerns IrfanView’s DXF file parsing, where improper validation of DXF data can trigger memory corruption and remote code execution. The vulnerability is described as exploitable when a target opens a malicious DXF file or visits a malicious page, with user interaction required. T...

CVE-2024-11560 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...