CVE-2024-11555

IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

CVE-2024-11555

CVE-2024-11555 relates to IrfanView’s DXF file parsing. The flaw is an out-of-bounds write in the DXF parser caused by insufficient validation of user-supplied data, enabling remote code execution. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file)...