Action not permitted
Modal body text goes here.
Modal Title
Modal Body
wid-sec-w-2024-3523
Vulnerability from csaf_certbund
Published
2024-11-21 23:00
Modified
2024-11-25 23:00
Summary
Irfan Skiljan IrfanView: Mehrere Schwachstellen ermöglichen Codeausführung
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IrfanView ist ein Bildbetrachter für Windows.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Irfan Skiljan IrfanView ausnutzen, um beliebigen Programmcode auszuführen.
Betroffene Betriebssysteme
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IrfanView ist ein Bildbetrachter f\u00fcr Windows.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Irfan Skiljan IrfanView ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3523 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3523.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3523 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3523"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1545 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1545/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1546 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1546/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1547 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1547/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1548 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1548/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1549 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1549/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1550 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1550/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1551 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1551/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1552 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1552/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1553 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1553/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1554 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1554/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1555 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1555/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1556 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1556/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1557 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1557/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1558 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1558/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1559 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1559/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1560 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1560/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1561 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1561/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1562 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1562/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1563 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1563/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1564 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1564/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1565 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1565/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1566 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1566/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1567 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1567/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1568 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1568/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1569 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1569/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1570 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1570/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1571 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1571/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1572 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1572/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1573 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1573/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1574 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1574/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1575 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1575/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1576 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1576/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1577 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1577/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1578 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1578/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1579 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1579/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1580 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1580/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1581 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1581/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1582 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1582/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1583 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1583/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1584 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1584/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1585 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1585/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1586 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1586/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1587 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1587/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1588 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1588/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1589 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1589/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1590 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1590/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1591 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1591/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1592 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1592/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1593 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1593/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1594 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1594/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1595 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1595/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1596 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1596/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1597 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1597/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1598 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1598/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1599 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1599/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1600 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1600/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1601 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1601/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1602 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1602/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1603 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1603/"
},
{
"category": "external",
"summary": "Zero Day Initiative ZDI-24-1604 vom 2024-11-21",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1604/"
},
{
"category": "external",
"summary": "Irfanview Download vom 2024-11-21",
"url": "https://www.irfanview.com/"
}
],
"source_lang": "en-US",
"title": "Irfan Skiljan IrfanView: Mehrere Schwachstellen erm\u00f6glichen Codeausf\u00fchrung",
"tracking": {
"current_release_date": "2024-11-25T23:00:00.000+00:00",
"generator": {
"date": "2024-11-26T09:16:27.342+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-3523",
"initial_release_date": "2024-11-21T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-11-21T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-11-25T23:00:00.000+00:00",
"number": "2",
"summary": "CVE-2024-11550 erg\u00e4nzt"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.70",
"product": {
"name": "Irfan Skiljan IrfanView \u003c4.70",
"product_id": "T038289"
}
},
{
"category": "product_version",
"name": "4.7",
"product": {
"name": "Irfan Skiljan IrfanView 4.70",
"product_id": "T038289-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:irfanview:irfanview:4.70"
}
}
},
{
"category": "product_version_range",
"name": "Plugins \u003c4.70",
"product": {
"name": "Irfan Skiljan IrfanView Plugins \u003c4.70",
"product_id": "T039388"
}
},
{
"category": "product_version",
"name": "Plugins 4.70",
"product": {
"name": "Irfan Skiljan IrfanView Plugins 4.70",
"product_id": "T039388-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:irfanview:irfanview:4.70::plugins"
}
}
}
],
"category": "product_name",
"name": "IrfanView"
}
],
"category": "vendor",
"name": "Irfan Skiljan"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-11506",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11506"
},
{
"cve": "CVE-2024-11507",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11507"
},
{
"cve": "CVE-2024-11508",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11508"
},
{
"cve": "CVE-2024-11509",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11509"
},
{
"cve": "CVE-2024-11510",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11510"
},
{
"cve": "CVE-2024-11511",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11511"
},
{
"cve": "CVE-2024-11512",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11512"
},
{
"cve": "CVE-2024-11513",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11513"
},
{
"cve": "CVE-2024-11514",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11514"
},
{
"cve": "CVE-2024-11515",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11515"
},
{
"cve": "CVE-2024-11516",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11516"
},
{
"cve": "CVE-2024-11517",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11517"
},
{
"cve": "CVE-2024-11518",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11518"
},
{
"cve": "CVE-2024-11519",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11519"
},
{
"cve": "CVE-2024-11520",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11520"
},
{
"cve": "CVE-2024-11521",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11521"
},
{
"cve": "CVE-2024-11522",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11522"
},
{
"cve": "CVE-2024-11523",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11523"
},
{
"cve": "CVE-2024-11524",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11524"
},
{
"cve": "CVE-2024-11525",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11525"
},
{
"cve": "CVE-2024-11526",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11526"
},
{
"cve": "CVE-2024-11527",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11527"
},
{
"cve": "CVE-2024-11528",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11528"
},
{
"cve": "CVE-2024-11529",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11529"
},
{
"cve": "CVE-2024-11530",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11530"
},
{
"cve": "CVE-2024-11531",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11531"
},
{
"cve": "CVE-2024-11532",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11532"
},
{
"cve": "CVE-2024-11533",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11533"
},
{
"cve": "CVE-2024-11534",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11534"
},
{
"cve": "CVE-2024-11535",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11535"
},
{
"cve": "CVE-2024-11536",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11536"
},
{
"cve": "CVE-2024-11537",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11537"
},
{
"cve": "CVE-2024-11538",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11538"
},
{
"cve": "CVE-2024-11539",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11539"
},
{
"cve": "CVE-2024-11540",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11540"
},
{
"cve": "CVE-2024-11541",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11541"
},
{
"cve": "CVE-2024-11542",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11542"
},
{
"cve": "CVE-2024-11543",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11543"
},
{
"cve": "CVE-2024-11544",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11544"
},
{
"cve": "CVE-2024-11545",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11545"
},
{
"cve": "CVE-2024-11546",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11546"
},
{
"cve": "CVE-2024-11547",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11547"
},
{
"cve": "CVE-2024-11548",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11548"
},
{
"cve": "CVE-2024-11549",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11549"
},
{
"cve": "CVE-2024-11550",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11550"
},
{
"cve": "CVE-2024-11551",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11551"
},
{
"cve": "CVE-2024-11552",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11552"
},
{
"cve": "CVE-2024-11553",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11553"
},
{
"cve": "CVE-2024-11554",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11554"
},
{
"cve": "CVE-2024-11555",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11555"
},
{
"cve": "CVE-2024-11556",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11556"
},
{
"cve": "CVE-2024-11557",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11557"
},
{
"cve": "CVE-2024-11558",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11558"
},
{
"cve": "CVE-2024-11559",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11559"
},
{
"cve": "CVE-2024-11560",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11560"
},
{
"cve": "CVE-2024-11561",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11561"
},
{
"cve": "CVE-2024-11562",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11562"
},
{
"cve": "CVE-2024-11563",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11563"
},
{
"cve": "CVE-2024-11564",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11564"
},
{
"cve": "CVE-2024-11565",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11565"
},
{
"cve": "CVE-2024-11566",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11566"
},
{
"cve": "CVE-2024-11567",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11567"
},
{
"cve": "CVE-2024-11568",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11568"
},
{
"cve": "CVE-2024-11569",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11569"
},
{
"cve": "CVE-2024-11570",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11570"
},
{
"cve": "CVE-2024-11571",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11571"
},
{
"cve": "CVE-2024-11572",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11572"
},
{
"cve": "CVE-2024-11573",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11573"
},
{
"cve": "CVE-2024-11574",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11574"
},
{
"cve": "CVE-2024-11575",
"notes": [
{
"category": "description",
"text": "In Irfan Skiljan IrfanView, sowie den Plugins \"WBZ\" und \"XCF\" existieren mehrere Schwachstellen. Zu den Ursachen z\u00e4hlen mehrere Fehler in der Speicherverwaltung, wie Heap- und Stack-based Buffer Overflows, Out-Of-Bounds Read/Write Fehler, Type Confusion, sowie Use-After-Free Fehler. Ein entfernter, anonymer Angreifer kann dies ausnutzen, um beliebigen Code im Kontext der Anwendung auszuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion, beispielsweise das \u00d6ffnen einer speziell manipulierten Bilddatei erforderlich."
}
],
"product_status": {
"known_affected": [
"T039388",
"T038289"
]
},
"release_date": "2024-11-21T23:00:00.000+00:00",
"title": "CVE-2024-11575"
}
]
}
CVE-2024-11506 (GCVE-0-2024-11506)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22169.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1594/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11506",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:24.464317Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:45.941Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 64bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:51:50.277-06:00",
"datePublic": "2024-11-21T14:51:43.224-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read before the start of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22169."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:08.016Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1594",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1594/"
}
],
"source": {
"lang": "en",
"value": "rgod"
},
"title": "IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11506",
"datePublished": "2024-11-22T20:50:08.016Z",
"dateReserved": "2024-11-20T21:51:50.201Z",
"dateUpdated": "2024-11-22T21:35:45.941Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11543 (GCVE-0-2024-11543)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24704.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1548/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11543",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:27.839253Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.499Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:35.641-06:00",
"datePublic": "2024-11-21T14:44:34.249-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24704."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:19.005Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1548",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1548/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11543",
"datePublished": "2024-11-22T20:45:19.005Z",
"dateReserved": "2024-11-20T21:54:35.593Z",
"dateUpdated": "2024-11-22T21:45:53.499Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11555 (GCVE-0-2024-11555)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24780.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1559/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11555",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:11.569609Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.819Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:31.988-06:00",
"datePublic": "2024-11-21T14:46:19.746-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24780."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:11.447Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1559",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1559/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11555",
"datePublished": "2024-11-22T20:46:11.447Z",
"dateReserved": "2024-11-20T21:55:31.931Z",
"dateUpdated": "2024-11-22T21:45:51.819Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11516 (GCVE-0-2024-11516)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24011.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1600/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11516",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:15.875519Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:45.493Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:45.757-06:00",
"datePublic": "2024-11-21T14:52:36.787-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24011."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:38.178Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1600",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1600/"
}
],
"source": {
"lang": "en",
"value": "Anonymous"
},
"title": "IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11516",
"datePublished": "2024-11-22T20:50:38.178Z",
"dateReserved": "2024-11-20T21:52:45.707Z",
"dateUpdated": "2024-11-22T21:35:45.493Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11518 (GCVE-0-2024-11518)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of RLE files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24444.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1596/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11518",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:21.416792Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:45.721Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:54.544-06:00",
"datePublic": "2024-11-21T14:52:04.212-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of RLE files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24444."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:18.649Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1596",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1596/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11518",
"datePublished": "2024-11-22T20:50:18.649Z",
"dateReserved": "2024-11-20T21:52:54.458Z",
"dateUpdated": "2024-11-22T21:35:45.721Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11574 (GCVE-0-2024-11574)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24900.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1573/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11574",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:50.887780Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.481Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:57:10.894-06:00",
"datePublic": "2024-11-21T14:48:24.341-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24900."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:46.067Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1573",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1573/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11574",
"datePublished": "2024-11-22T20:47:46.067Z",
"dateReserved": "2024-11-20T21:57:10.842Z",
"dateUpdated": "2024-11-22T21:45:52.481Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11523 (GCVE-0-2024-11523)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24597.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1592/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11523",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:26.975204Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.185Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:14.668-06:00",
"datePublic": "2024-11-21T14:51:26.119-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24597."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:00.452Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1592",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1592/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11523",
"datePublished": "2024-11-22T20:50:00.452Z",
"dateReserved": "2024-11-20T21:53:14.613Z",
"dateUpdated": "2024-11-22T21:35:46.185Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11507 (GCVE-0-2024-11507)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:21
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Summary
IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22177.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1604/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11507",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:11:07.876594Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:21:16.743Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:51:55.282-06:00",
"datePublic": "2024-11-21T14:53:08.269-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22177."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:54.287Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1604",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1604/"
}
],
"source": {
"lang": "en",
"value": "rgod"
},
"title": "IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11507",
"datePublished": "2024-11-22T20:50:54.287Z",
"dateReserved": "2024-11-20T21:51:55.231Z",
"dateUpdated": "2024-11-22T21:21:16.743Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11515 (GCVE-0-2024-11515)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24010.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1598/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11515",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:18.877924Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:45.355Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:37.275-06:00",
"datePublic": "2024-11-21T14:52:20.357-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24010."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:29.047Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1598",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1598/"
}
],
"source": {
"lang": "en",
"value": "Anonymous"
},
"title": "IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11515",
"datePublished": "2024-11-22T20:50:29.047Z",
"dateReserved": "2024-11-20T21:52:37.221Z",
"dateUpdated": "2024-11-22T21:35:45.355Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11546 (GCVE-0-2024-11546)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24714.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1543/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11546",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:34.215944Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.857Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:48.782-06:00",
"datePublic": "2024-11-21T14:43:47.921-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24714."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:53.208Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1543",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1543/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11546",
"datePublished": "2024-11-22T20:44:53.208Z",
"dateReserved": "2024-11-20T21:54:48.729Z",
"dateUpdated": "2024-11-22T21:45:53.857Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11514 (GCVE-0-2024-11514)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of ECW files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23975.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1599/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11514",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:17.174746Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.153Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:31.638-06:00",
"datePublic": "2024-11-21T14:52:28.008-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ECW files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23975."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:33.108Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1599",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1599/"
}
],
"source": {
"lang": "en",
"value": "Anonymous"
},
"title": "IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11514",
"datePublished": "2024-11-22T20:50:33.108Z",
"dateReserved": "2024-11-20T21:52:31.590Z",
"dateUpdated": "2024-11-22T21:45:53.153Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11548 (GCVE-0-2024-11548)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24745.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1545/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11548",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:31.560760Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.918Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:58.960-06:00",
"datePublic": "2024-11-21T14:44:05.447-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24745."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:02.065Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1545",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1545/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11548",
"datePublished": "2024-11-22T20:45:02.065Z",
"dateReserved": "2024-11-20T21:54:58.912Z",
"dateUpdated": "2024-11-22T21:45:48.918Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11568 (GCVE-0-2024-11568)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24872.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1563/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11568",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:04.851404Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.701Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:40.053-06:00",
"datePublic": "2024-11-21T14:46:54.566-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24872."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:29.774Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1563",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1563/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11568",
"datePublished": "2024-11-22T20:46:29.774Z",
"dateReserved": "2024-11-20T21:56:40.005Z",
"dateUpdated": "2024-11-22T21:35:48.701Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11569 (GCVE-0-2024-11569)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24873.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1574/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11569",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:49.649755Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.808Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:45.486-06:00",
"datePublic": "2024-11-21T14:48:35.530-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24873."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:50.508Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1574",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1574/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11569",
"datePublished": "2024-11-22T20:47:50.508Z",
"dateReserved": "2024-11-20T21:56:45.424Z",
"dateUpdated": "2024-11-22T21:35:48.808Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11573 (GCVE-0-2024-11573)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24898.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1565/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11573",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:00.833633Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.342Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:57:06.347-06:00",
"datePublic": "2024-11-21T14:47:12.998-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24898."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:37.998Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1565",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1565/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11573",
"datePublished": "2024-11-22T20:46:37.998Z",
"dateReserved": "2024-11-20T21:57:06.295Z",
"dateUpdated": "2024-11-22T21:45:52.342Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11538 (GCVE-0-2024-11538)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24629.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1588/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11538",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:31.807150Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.363Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:13.375-06:00",
"datePublic": "2024-11-21T14:50:49.025-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24629."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:42.867Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1588",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1588/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11538",
"datePublished": "2024-11-22T20:49:42.867Z",
"dateReserved": "2024-11-20T21:54:13.326Z",
"dateUpdated": "2024-11-22T21:35:47.363Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11560 (GCVE-0-2024-11560)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24853.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1578/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11560",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:44.403901Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.782Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:58.328-06:00",
"datePublic": "2024-11-21T14:49:06.693-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24853."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:01.973Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1578",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1578/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11560",
"datePublished": "2024-11-22T20:49:01.973Z",
"dateReserved": "2024-11-20T21:55:58.278Z",
"dateUpdated": "2024-11-22T21:35:47.782Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11541 (GCVE-0-2024-11541)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24702.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1552/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11541",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:21.655243Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.281Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:27.008-06:00",
"datePublic": "2024-11-21T14:45:14.118-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24702."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:42.199Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1552",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1552/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11541",
"datePublished": "2024-11-22T20:45:42.199Z",
"dateReserved": "2024-11-20T21:54:26.961Z",
"dateUpdated": "2024-11-22T21:45:53.281Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11519 (GCVE-0-2024-11519)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of RLE files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24445.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1595/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11519",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:22.847030Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:45.815Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:58.555-06:00",
"datePublic": "2024-11-21T14:51:51.725-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of RLE files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24445."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:13.726Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1595",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1595/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11519",
"datePublished": "2024-11-22T20:50:13.726Z",
"dateReserved": "2024-11-20T21:52:58.504Z",
"dateUpdated": "2024-11-22T21:35:45.815Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11525 (GCVE-0-2024-11525)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-416 - Use After Free
Summary
IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24599.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1591/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11525",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:28.257159Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.392Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:22.259-06:00",
"datePublic": "2024-11-21T14:51:17.063-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24599."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:55.727Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1591",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1591/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11525",
"datePublished": "2024-11-22T20:49:55.727Z",
"dateReserved": "2024-11-20T21:53:22.209Z",
"dateUpdated": "2024-11-22T21:35:46.392Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11544 (GCVE-0-2024-11544)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24707.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1541/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11544",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:37.014084Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.611Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:39.918-06:00",
"datePublic": "2024-11-21T14:42:46.231-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24707."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:42.788Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1541",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1541/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11544",
"datePublished": "2024-11-22T20:44:42.788Z",
"dateReserved": "2024-11-20T21:54:39.863Z",
"dateUpdated": "2024-11-22T21:45:53.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11528 (GCVE-0-2024-11528)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24602.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1589/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11528",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:30.600324Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.500Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:33.996-06:00",
"datePublic": "2024-11-21T14:50:57.368-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24602."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:46.926Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1589",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1589/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11528",
"datePublished": "2024-11-22T20:49:46.926Z",
"dateReserved": "2024-11-20T21:53:33.949Z",
"dateUpdated": "2024-11-22T21:35:46.500Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11521 (GCVE-0-2024-11521)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-416 - Use After Free
Summary
IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DJVU files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24578.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1579/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11521",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:43.102097Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.688Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:07.069-06:00",
"datePublic": "2024-11-21T14:49:14.127-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DJVU files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24578."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:06.145Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1579",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1579/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11521",
"datePublished": "2024-11-22T20:49:06.145Z",
"dateReserved": "2024-11-20T21:53:07.022Z",
"dateUpdated": "2024-11-22T21:35:47.688Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11563 (GCVE-0-2024-11563)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24860.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1576/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11563",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:47.002003Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.163Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:11.527-06:00",
"datePublic": "2024-11-21T14:48:51.745-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24860."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:58.945Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1576",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1576/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11563",
"datePublished": "2024-11-22T20:47:58.945Z",
"dateReserved": "2024-11-20T21:56:11.479Z",
"dateUpdated": "2024-11-22T21:35:48.163Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11564 (GCVE-0-2024-11564)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24864.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1568/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11564",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:57.153682Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.282Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:17.176-06:00",
"datePublic": "2024-11-21T14:47:40.452-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24864."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:49.285Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1568",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1568/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11564",
"datePublished": "2024-11-22T20:46:49.285Z",
"dateReserved": "2024-11-20T21:56:17.127Z",
"dateUpdated": "2024-11-22T21:35:48.282Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11572 (GCVE-0-2024-11572)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24897.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1570/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11572",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:54.653134Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.228Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:57:00.907-06:00",
"datePublic": "2024-11-21T14:47:57.860-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24897."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:30.184Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1570",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1570/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11572",
"datePublished": "2024-11-22T20:47:30.184Z",
"dateReserved": "2024-11-20T21:57:00.859Z",
"dateUpdated": "2024-11-22T21:45:52.228Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11575 (GCVE-0-2024-11575)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24901.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1569/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11575",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:55.910726Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.617Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:57:15.270-06:00",
"datePublic": "2024-11-21T14:47:49.534-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24901."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:54.706Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1569",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1569/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11575",
"datePublished": "2024-11-22T20:46:54.706Z",
"dateReserved": "2024-11-20T21:57:15.214Z",
"dateUpdated": "2024-11-22T21:45:52.617Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11539 (GCVE-0-2024-11539)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24699.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1553/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11539",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:20.250311Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.267Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:17.976-06:00",
"datePublic": "2024-11-21T14:45:23.051-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24699."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:46.081Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1553",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1553/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11539",
"datePublished": "2024-11-22T20:45:46.081Z",
"dateReserved": "2024-11-20T21:54:17.926Z",
"dateUpdated": "2024-11-22T21:45:48.267Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11558 (GCVE-0-2024-11558)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24808.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1560/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11558",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:09.723470Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:54.030Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:48.757-06:00",
"datePublic": "2024-11-21T14:46:29.443-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24808."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:15.542Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1560",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1560/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11558",
"datePublished": "2024-11-22T20:46:15.542Z",
"dateReserved": "2024-11-20T21:55:48.707Z",
"dateUpdated": "2024-11-22T21:45:54.030Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11522 (GCVE-0-2024-11522)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24595.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1590/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11522",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:29.389206Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.053Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:10.666-06:00",
"datePublic": "2024-11-21T14:51:08.258-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24595."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:52.345Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1590",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1590/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11522",
"datePublished": "2024-11-22T20:49:52.345Z",
"dateReserved": "2024-11-20T21:53:10.615Z",
"dateUpdated": "2024-11-22T21:35:46.053Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11565 (GCVE-0-2024-11565)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24866.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1567/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11565",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:58.295106Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.388Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:23.297-06:00",
"datePublic": "2024-11-21T14:47:30.297-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24866."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:45.733Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1567",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1567/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11565",
"datePublished": "2024-11-22T20:46:45.733Z",
"dateReserved": "2024-11-20T21:56:23.242Z",
"dateUpdated": "2024-11-22T21:35:48.388Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11526 (GCVE-0-2024-11526)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24600.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1539/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11526",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:39.978405Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:47.907Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:26.146-06:00",
"datePublic": "2024-11-21T14:42:23.189-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24600."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:33.267Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1539",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1539/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11526",
"datePublished": "2024-11-22T20:44:33.267Z",
"dateReserved": "2024-11-20T21:53:26.097Z",
"dateUpdated": "2024-11-22T21:45:47.907Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11562 (GCVE-0-2024-11562)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24858.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1572/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11562",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:52.120895Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.991Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:07.711-06:00",
"datePublic": "2024-11-21T14:48:15.469-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24858."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:41.768Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1572",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1572/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11562",
"datePublished": "2024-11-22T20:47:41.768Z",
"dateReserved": "2024-11-20T21:56:07.662Z",
"dateUpdated": "2024-11-22T21:35:47.991Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11551 (GCVE-0-2024-11551)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24749.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1549/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11551",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:25.932336Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.449Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:14.199-06:00",
"datePublic": "2024-11-21T14:44:44.669-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24749."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:25.635Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1549",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1549/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11551",
"datePublished": "2024-11-22T20:45:25.635Z",
"dateReserved": "2024-11-20T21:55:14.144Z",
"dateUpdated": "2024-11-22T21:45:51.449Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11511 (GCVE-0-2024-11511)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of XCF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22735.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1556/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11511",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:16.039446Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.734Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:16.092-06:00",
"datePublic": "2024-11-21T14:45:51.470-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XCF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22735."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:00.484Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1556",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1556/"
}
],
"source": {
"lang": "en",
"value": "ssongk of WHS WWW Team"
},
"title": "IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11511",
"datePublished": "2024-11-22T20:46:00.484Z",
"dateReserved": "2024-11-20T21:52:16.043Z",
"dateUpdated": "2024-11-22T21:45:52.734Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11552 (GCVE-0-2024-11552)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24751.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1546/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11552",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:30.389672Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.574Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:17.920-06:00",
"datePublic": "2024-11-21T14:44:16.929-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24751."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:09.292Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1546",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1546/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11552",
"datePublished": "2024-11-22T20:45:09.292Z",
"dateReserved": "2024-11-20T21:55:17.871Z",
"dateUpdated": "2024-11-22T21:45:51.574Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11531 (GCVE-0-2024-11531)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24606.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1535/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11531",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:46.291486Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.549Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:44.560-06:00",
"datePublic": "2024-11-21T14:39:57.390-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24606."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:11.355Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1535",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1535/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11531",
"datePublished": "2024-11-22T20:44:11.355Z",
"dateReserved": "2024-11-20T21:53:44.511Z",
"dateUpdated": "2024-11-22T21:45:48.549Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11530 (GCVE-0-2024-11530)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24605.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1536/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11530",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:44.072748Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.397Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:40.994-06:00",
"datePublic": "2024-11-21T14:40:08.099-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24605."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:16.264Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1536",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1536/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11530",
"datePublished": "2024-11-22T20:44:16.264Z",
"dateReserved": "2024-11-20T21:53:40.941Z",
"dateUpdated": "2024-11-22T21:45:48.397Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11535 (GCVE-0-2024-11535)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24618.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1584/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11535",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:36.759027Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.941Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:00.965-06:00",
"datePublic": "2024-11-21T14:50:18.417-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24618."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:26.520Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1584",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1584/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11535",
"datePublished": "2024-11-22T20:49:26.520Z",
"dateReserved": "2024-11-20T21:54:00.912Z",
"dateUpdated": "2024-11-22T21:35:46.941Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11547 (GCVE-0-2024-11547)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24732.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1544/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11547",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:32.902749Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.801Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:53.501-06:00",
"datePublic": "2024-11-21T14:43:56.985-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24732."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:57.281Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1544",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1544/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11547",
"datePublished": "2024-11-22T20:44:57.281Z",
"dateReserved": "2024-11-20T21:54:53.453Z",
"dateUpdated": "2024-11-22T21:45:48.801Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11510 (GCVE-0-2024-11510)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-121 - Stack-based Buffer Overflow
Summary
IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of WB1 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22718.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1557/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11510",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:14.435220Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.008Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:10.624-06:00",
"datePublic": "2024-11-21T14:46:00.142-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of WB1 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22718."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121: Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:04.011Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1557",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1557/"
}
],
"source": {
"lang": "en",
"value": "Minseo Kim of WHS WWW Team"
},
"title": "IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11510",
"datePublished": "2024-11-22T20:46:04.011Z",
"dateReserved": "2024-11-20T21:52:10.571Z",
"dateUpdated": "2024-11-22T21:45:51.008Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11533 (GCVE-0-2024-11533)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24616.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1586/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11533",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:34.207463Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.729Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:52.644-06:00",
"datePublic": "2024-11-21T14:50:35.184-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24616."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:35.516Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1586",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1586/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11533",
"datePublished": "2024-11-22T20:49:35.516Z",
"dateReserved": "2024-11-20T21:53:52.597Z",
"dateUpdated": "2024-11-22T21:35:46.729Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11561 (GCVE-0-2024-11561)
Vulnerability from cvelistv5
Published
2024-11-22 20:48
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24857.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1577/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11561",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:45.696283Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.887Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:03.349-06:00",
"datePublic": "2024-11-21T14:48:59.499-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24857."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:48:55.915Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1577",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1577/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11561",
"datePublished": "2024-11-22T20:48:55.915Z",
"dateReserved": "2024-11-20T21:56:03.298Z",
"dateUpdated": "2024-11-22T21:35:47.887Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11550 (GCVE-0-2024-11550)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24748.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1540/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11550",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:38.700590Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.306Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:09.626-06:00",
"datePublic": "2024-11-21T14:42:36.236-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24748."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:37.737Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1540",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1540/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11550",
"datePublished": "2024-11-22T20:44:37.737Z",
"dateReserved": "2024-11-20T21:55:09.572Z",
"dateUpdated": "2024-11-22T21:45:51.306Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11513 (GCVE-0-2024-11513)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of ECW files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23971.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1601/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11513",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:14.452698Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.968Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:25.730-06:00",
"datePublic": "2024-11-21T14:52:44.365-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ECW files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23971."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:41.789Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1601",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1601/"
}
],
"source": {
"lang": "en",
"value": "Anonymous"
},
"title": "IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11513",
"datePublished": "2024-11-22T20:50:41.789Z",
"dateReserved": "2024-11-20T21:52:25.683Z",
"dateUpdated": "2024-11-22T21:45:52.968Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11517 (GCVE-0-2024-11517)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24118.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1597/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11517",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:20.118964Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:45.605Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67, JPM plugin 4.63"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:50.320-06:00",
"datePublic": "2024-11-21T14:52:12.361-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24118."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:23.343Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1597",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1597/"
}
],
"source": {
"lang": "en",
"value": "Anonymous"
},
"title": "IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11517",
"datePublished": "2024-11-22T20:50:23.343Z",
"dateReserved": "2024-11-20T21:52:50.269Z",
"dateUpdated": "2024-11-22T21:35:45.605Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11537 (GCVE-0-2024-11537)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24620.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1582/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11537",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:39.231601Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.246Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:08.584-06:00",
"datePublic": "2024-11-21T14:49:51.970-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24620."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:19.298Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1582",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1582/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11537",
"datePublished": "2024-11-22T20:49:19.298Z",
"dateReserved": "2024-11-20T21:54:08.535Z",
"dateUpdated": "2024-11-22T21:35:47.246Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11524 (GCVE-0-2024-11524)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24598.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1593/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11524",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:25.663455Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.280Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:18.590-06:00",
"datePublic": "2024-11-21T14:51:34.598-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24598."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:04.140Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1593",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1593/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11524",
"datePublished": "2024-11-22T20:50:04.140Z",
"dateReserved": "2024-11-20T21:53:18.538Z",
"dateUpdated": "2024-11-22T21:35:46.280Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11532 (GCVE-0-2024-11532)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24615.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1587/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11532",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:33.031783Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.615Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:48.884-06:00",
"datePublic": "2024-11-21T14:50:41.758-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24615."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:39.208Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1587",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1587/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11532",
"datePublished": "2024-11-22T20:49:39.208Z",
"dateReserved": "2024-11-20T21:53:48.834Z",
"dateUpdated": "2024-11-22T21:35:46.615Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11557 (GCVE-0-2024-11557)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24807.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1561/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11557",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:08.079647Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.094Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:43.351-06:00",
"datePublic": "2024-11-21T14:46:38.213-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24807."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:19.442Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1561",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1561/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11557",
"datePublished": "2024-11-22T20:46:19.442Z",
"dateReserved": "2024-11-20T21:55:43.301Z",
"dateUpdated": "2024-11-22T21:45:52.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11566 (GCVE-0-2024-11566)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24868.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1564/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11566",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:03.129986Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.488Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:27.413-06:00",
"datePublic": "2024-11-21T14:47:03.437-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24868."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:33.614Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1564",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1564/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11566",
"datePublished": "2024-11-22T20:46:33.614Z",
"dateReserved": "2024-11-20T21:56:27.362Z",
"dateUpdated": "2024-11-22T21:35:48.488Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11556 (GCVE-0-2024-11556)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24795.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1562/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11556",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:06.369580Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.958Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:39.243-06:00",
"datePublic": "2024-11-21T14:46:46.845-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24795."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:25.601Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1562",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1562/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11556",
"datePublished": "2024-11-22T20:46:25.601Z",
"dateReserved": "2024-11-20T21:55:39.195Z",
"dateUpdated": "2024-11-22T21:45:51.958Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11570 (GCVE-0-2024-11570)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-416 - Use After Free
Summary
IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24885.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1571/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11570",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:53.491117Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:54.476Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:50.027-06:00",
"datePublic": "2024-11-21T14:48:04.735-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24885."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:36.379Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1571",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1571/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11570",
"datePublished": "2024-11-22T20:47:36.379Z",
"dateReserved": "2024-11-20T21:56:49.967Z",
"dateUpdated": "2024-11-22T21:45:54.476Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11512 (GCVE-0-2024-11512)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of WB1 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22741.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1555/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11512",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:17.290159Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:52.840Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:20.387-06:00",
"datePublic": "2024-11-21T14:45:41.078-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of WB1 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22741."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:56.648Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1555",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1555/"
}
],
"source": {
"lang": "en",
"value": "ssongk of WHS WWW Team"
},
"title": "IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11512",
"datePublished": "2024-11-22T20:45:56.648Z",
"dateReserved": "2024-11-20T21:52:20.341Z",
"dateUpdated": "2024-11-22T21:45:52.840Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11542 (GCVE-0-2024-11542)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24703.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1550/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11542",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:24.563186Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.393Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:31.350-06:00",
"datePublic": "2024-11-21T14:44:53.704-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24703."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:33.891Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1550",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1550/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11542",
"datePublished": "2024-11-22T20:45:33.891Z",
"dateReserved": "2024-11-20T21:54:31.300Z",
"dateUpdated": "2024-11-22T21:45:53.393Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11509 (GCVE-0-2024-11509)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:25
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-122 - Heap-based Buffer Overflow
Summary
IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of SVG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22185.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1602/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11509",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:13.128148Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:25:43.603Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:06.408-06:00",
"datePublic": "2024-11-21T14:52:52.944-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SVG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22185."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:45.811Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1602",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1602/"
}
],
"source": {
"lang": "en",
"value": "rgod"
},
"title": "IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11509",
"datePublished": "2024-11-22T20:50:45.811Z",
"dateReserved": "2024-11-20T21:52:06.361Z",
"dateUpdated": "2024-11-22T21:25:43.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11553 (GCVE-0-2024-11553)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24752.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1554/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11553",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:18.815548Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:51.693Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:22.561-06:00",
"datePublic": "2024-11-21T14:45:32.063-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24752."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:52.045Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1554",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1554/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11553",
"datePublished": "2024-11-22T20:45:52.045Z",
"dateReserved": "2024-11-20T21:55:22.514Z",
"dateUpdated": "2024-11-22T21:45:51.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11559 (GCVE-0-2024-11559)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24809.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1558/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11559",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:13.025628Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:54.337Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:53.484-06:00",
"datePublic": "2024-11-21T14:46:08.772-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24809."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:07.757Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1558",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1558/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11559",
"datePublished": "2024-11-22T20:46:07.757Z",
"dateReserved": "2024-11-20T21:55:53.435Z",
"dateUpdated": "2024-11-22T21:45:54.337Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11549 (GCVE-0-2024-11549)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24746.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1547/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11549",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:29.158943Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:50.808Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:04.944-06:00",
"datePublic": "2024-11-21T14:44:24.567-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24746."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:14.189Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1547",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1547/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11549",
"datePublished": "2024-11-22T20:45:14.189Z",
"dateReserved": "2024-11-20T21:55:04.892Z",
"dateUpdated": "2024-11-22T21:45:50.808Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11571 (GCVE-0-2024-11571)
Vulnerability from cvelistv5
Published
2024-11-22 20:46
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24895.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1566/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11571",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:59.580907Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:54.608Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:55.961-06:00",
"datePublic": "2024-11-21T14:47:20.363-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24895."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:46:41.406Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1566",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1566/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11571",
"datePublished": "2024-11-22T20:46:41.406Z",
"dateReserved": "2024-11-20T21:56:55.908Z",
"dateUpdated": "2024-11-22T21:45:54.608Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11520 (GCVE-0-2024-11520)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of ARW files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24488.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1580/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11520",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:41.782288Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.581Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:03.386-06:00",
"datePublic": "2024-11-21T14:49:22.928-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ARW files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24488."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:11.819Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1580",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1580/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11520",
"datePublished": "2024-11-22T20:49:11.819Z",
"dateReserved": "2024-11-20T21:53:03.338Z",
"dateUpdated": "2024-11-22T21:35:47.581Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11508 (GCVE-0-2024-11508)
Vulnerability from cvelistv5
Published
2024-11-22 20:50
Modified
2024-11-22 21:25
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Summary
IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22184.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1603/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.62",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11508",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:16:53.400462Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:25:43.491Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.62 32bit"
}
]
}
],
"dateAssigned": "2024-11-20T15:52:00.486-06:00",
"datePublic": "2024-11-21T14:53:00.849-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22184."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:50:50.307Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1603",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1603/"
}
],
"source": {
"lang": "en",
"value": "rgod"
},
"title": "IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11508",
"datePublished": "2024-11-22T20:50:50.307Z",
"dateReserved": "2024-11-20T21:52:00.423Z",
"dateUpdated": "2024-11-22T21:25:43.491Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11554 (GCVE-0-2024-11554)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-787 - Out-of-bounds Write
Summary
IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24754.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1581/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11554",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:40.475980Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.476Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:55:27.380-06:00",
"datePublic": "2024-11-21T14:49:32.172-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24754."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:15.254Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1581",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1581/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11554",
"datePublished": "2024-11-22T20:49:15.254Z",
"dateReserved": "2024-11-20T21:55:27.334Z",
"dateUpdated": "2024-11-22T21:35:47.476Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11540 (GCVE-0-2024-11540)
Vulnerability from cvelistv5
Published
2024-11-22 20:45
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24700.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1551/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11540",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:23.017927Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.663Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:23.209-06:00",
"datePublic": "2024-11-21T14:45:03.404-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24700."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:45:38.428Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1551",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1551/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11540",
"datePublished": "2024-11-22T20:45:38.428Z",
"dateReserved": "2024-11-20T21:54:23.158Z",
"dateUpdated": "2024-11-22T21:45:48.663Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11545 (GCVE-0-2024-11545)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-416 - Use After Free
Summary
IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24709.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1542/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11545",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:35.473630Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:53.732Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:44.005-06:00",
"datePublic": "2024-11-21T14:42:55.301-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24709."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:47.554Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1542",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1542/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11545",
"datePublished": "2024-11-22T20:44:47.554Z",
"dateReserved": "2024-11-20T21:54:43.952Z",
"dateUpdated": "2024-11-22T21:45:53.732Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11534 (GCVE-0-2024-11534)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24617.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1585/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11534",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:35.499017Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:46.834Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:56.637-06:00",
"datePublic": "2024-11-21T14:50:27.970-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24617."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:30.124Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1585",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1585/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11534",
"datePublished": "2024-11-22T20:49:30.124Z",
"dateReserved": "2024-11-20T21:53:56.590Z",
"dateUpdated": "2024-11-22T21:35:46.834Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11529 (GCVE-0-2024-11529)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24604.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1537/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11529",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:42.783783Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:47.781Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:37.468-06:00",
"datePublic": "2024-11-21T14:42:05.377-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24604."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:20.813Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1537",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1537/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11529",
"datePublished": "2024-11-22T20:44:20.813Z",
"dateReserved": "2024-11-20T21:53:37.421Z",
"dateUpdated": "2024-11-22T21:45:47.781Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11567 (GCVE-0-2024-11567)
Vulnerability from cvelistv5
Published
2024-11-22 20:47
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24871.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1575/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11567",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:48.269927Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:48.587Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:56:32.817-06:00",
"datePublic": "2024-11-21T14:48:43.918-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24871."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:47:54.879Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1575",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1575/"
}
],
"source": {
"lang": "en",
"value": "Rocco Calvi (@TecR0c) with TecSecurity"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11567",
"datePublished": "2024-11-22T20:47:54.879Z",
"dateReserved": "2024-11-20T21:56:32.769Z",
"dateUpdated": "2024-11-22T21:35:48.587Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11527 (GCVE-0-2024-11527)
Vulnerability from cvelistv5
Published
2024-11-22 20:44
Modified
2024-11-22 21:45
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary
IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24601.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1538/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11527",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:19:41.519435Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:45:48.048Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:53:30.317-06:00",
"datePublic": "2024-11-21T14:42:14.090-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24601."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:44:26.235Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1538",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1538/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11527",
"datePublished": "2024-11-22T20:44:26.235Z",
"dateReserved": "2024-11-20T21:53:30.270Z",
"dateUpdated": "2024-11-22T21:45:48.048Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11536 (GCVE-0-2024-11536)
Vulnerability from cvelistv5
Published
2024-11-22 20:49
Modified
2024-11-22 21:35
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24619.
References
| ▼ | URL | Tags |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-1583/ | x_research-advisory |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:irfanview:irfanview:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "irfanview",
"vendor": "irfanview",
"versions": [
{
"lessThan": "4.70",
"status": "affected",
"version": "4.67",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11536",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-22T21:18:38.043475Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T21:35:47.136Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "IrfanView",
"vendor": "IrfanView",
"versions": [
{
"status": "affected",
"version": "4.67.0.0"
}
]
}
],
"dateAssigned": "2024-11-20T15:54:04.772-06:00",
"datePublic": "2024-11-21T14:49:59.447-06:00",
"descriptions": [
{
"lang": "en",
"value": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24619."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T20:49:22.719Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-24-1583",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1583/"
}
],
"source": {
"lang": "en",
"value": "Mat Powell of Trend Micro Zero Day Initiative"
},
"title": "IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2024-11536",
"datePublished": "2024-11-22T20:49:22.719Z",
"dateReserved": "2024-11-20T21:54:04.712Z",
"dateUpdated": "2024-11-22T21:35:47.136Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…