PT-2002-2478 · Acd Systems · Acdsee

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1756

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ACDSee version 4.0

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing an .ais file with a long file description field. This field is not properly handled when the file properties of the file are viewed.

Recommendations For ACDSee version 4.0, avoid viewing file properties of .ais files with long file description fields until a fix is available. As a temporary workaround, consider restricting the use of .ais files to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1756

Produtos afetados

Acdsee

Referências · 5

• 🔥 http://securityfocus.com/bid/4719 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9052 · Nota
• http://online.securityfocus.com/archive/1/271963 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1756 · Nota de Segurança
• http://xforce.iss.net/xforce/xfdb/9052 · Nota