2 matches found
Input validation
Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file...
CVE-2023-24304
CVE-2023-24304 affects IrfanView v4.60 via its PDF.dll plugin, where improper input validation allows arbitrary code execution when opening a crafted PDF file. The vulnerability centers on the PDF.dll plugin, and multiple sources (NVD, Red Hat, CNNVD, CVE lists) confirm the same impact. Remediati...