High · 7.8 CVE-2023-24304 EUVD-2023-28360GHSA-m79g-73hm-2964

Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF fil…

Published Mar 28, 2023 · Updated Feb 18, 2025 · Assigned by mitre

Description

Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file.

Advisories 1

WID-SEC-2023-0786 Irfan Skiljan IrfanView: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Mar 30, 2023

References

https://www.sit.fraunhofer.de/CVE-2023-24304/