IrfanView CADImage Plugin Out-of-Bounds Read Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the IrfanView CADImage Plugin, specifically within the parsing of CGM files. This issue arises from inadequate validation of user-supplied data, leading to out-of-bounds read conditions that can be exploited to execute arbitrary code in the context of the current process. Exploitation requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users can upgrade to IrfanView CADImage Plugin version 4.72 to address this vulnerability.