CVE-2024-11514

CVE-2024-11514 – IrfanView : The issue stems from parsing ECW files in IrfanView, where the length of user-supplied data is not properly validated before copying to a heap-based buffer, causing a heap-based buffer overflow. This can lead to arbitrary code execution in the attacker’s context. Expl...

CVE-2024-11515

CVE-2024-11515 is an IrfanView vulnerability affecting JPM file parsing. The flaw is an out-of-bounds write caused by insufficient validation of user-supplied data during JPM parsing, allowing an attacker to execute code in the context of the current process. Exploitation requires user interactio...

CVE-2024-11517

CVE-2024-11517 concerns IrfanView JPM file parsing where a lack of input validation allows an out-of-bounds write, leading to remote code execution. The vulnerability requires user interaction (opening a malicious JPM file or visiting a crafted page) and is described as a write-past-end of an all...

CVE-2024-11519 IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11524

IrfanView DXF File Parsing Memory Corruption vulnerability (CVE-2024-11524) affects IrfanView and stems from improper validation during DXF parsing, leading to memory corruption and remote code execution. Exploitation requires user interaction (the target must open a malicious file or visit a mal...

CVE-2024-11524 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11523 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11523 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11525 IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability

IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11525

This CVE (CVE-2024-11525) concerns IrfanView DXF file parsing leading to a Use-After-Free that allows remote code execution. The flaw arises during DXF parsing from failure to validate the existence of an object before operating on it, enabling code execution in the process context. Affected soft...

CVE-2024-11522 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11528 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11532

CVE-2024-11532 affects IrfanView. The vulnerability is in the parsing of DXF files, caused by insufficient validation of user-supplied data, enabling an out-of-bounds write that can be exploited to execute code. Impact: remote code execution with the attacker needing to entice the target to view ...

CVE-2024-11532 IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11533 IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11533

CVE-2024-11533 refers to an out-of-bounds write in IrfanView’s DXF file parsing, enabling remote code execution. The flaw stems from insufficient validation of user-supplied data during DXF parsing, which can write past the end of an allocated buffer and execute code in the current process. Explo...

CVE-2024-11534 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11534

CVE-2024-11534 concerns IrfanView. The vulnerability is an out-of-bounds read in the DXF file parsing path that can allow arbitrary code execution. It requires user interaction (visiting a malicious page or opening a malicious file) and stems from insufficient validation of input, allowing read p...

CVE-2024-11534 IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2024-11535

CVE-2024-11535 affects IrfanView with an out-of-bounds read while parsing DXF files, leading to remote code execution. The flaw arises from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer. Exploitation requires user interaction (target opens a ma...