CVE-2024-11546 IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11546

CVE-2024-11546 affects IrfanView through the DXF file parsing path. The flaw is an out-of-bounds write caused by insufficient validation of user-supplied data in DXF file handling, enabling arbitrary code execution in the context of the current process. Exploitation requires user interaction (vis...