CVE-2024-11568: 
IrfanView vulnerability analysis and mitigation

CVE-2024-11568 is an out-of-bounds read vulnerability in IrfanView that enables remote code execution. The vulnerability was discovered in IrfanView version 4.67 and affects both x64 and x86 variants. It was reported on July 24, 2024, and publicly disclosed on November 21, 2024 (ZDI Advisory).

The vulnerability exists within the DXF file parsing functionality of IrfanView. The specific flaw stems from improper validation of user-supplied data, which can result in a read operation past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

A successful exploitation of this vulnerability allows attackers to execute arbitrary code in the context of the current process. The attack requires user interaction, specifically opening a malicious file or visiting a malicious page (ZDI Advisory).

The vulnerability has been fixed in IrfanView version 4.70 with plugins version 4.70. Users are advised to upgrade to this version to mitigate the risk (ZDI Advisory).