IrfanView CADImage Plugin Out-of-Bounds Write Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the IrfanView CADImage Plugin, specifically within the parsing of DXF files. The issue arises from inadequate validation of user-supplied data, leading to a buffer overflow that allows for arbitrary code execution in the context of the current process. Exploitation of this vulnerability requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system.

Remediation

The vulnerability has been fixed in IrfanView CADImage Plugin version 4.72.