Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-6816: IrfanView Can Run Unwanted Code from Malicious PSP Files

CVE-2024-6816 · published 1 year ago

Summary

Some IrfanView installations can be tricked into running malicious code if a user opens a specially crafted PSP file or visits a malicious website. This could allow an attacker to take control of the computer. To protect your system, update IrfanView to the latest version or consider using an alternative image viewer.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
irfanview	irfanview	4.66 `cpe:2.3:a:irfanview:irfanview:4.66::::::x64:`

Original advisory text

IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23214.

References

https://www.zerodayinitiative.com/advisories/ZDI-24-968/ Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-122Heap-based Buffer Overflow

CWE-787Out-of-bounds Write

Timeline

Published22 Nov 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-6816 · NVD

Track software like this

Free during beta