PT-2007-3288 · Acd Systems · Acdsee Photo Manager

Publicado 2007-04-10 · Atualizado 2018-10-16 · CVE-2007-1943

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ACDSee Photo Manager version 9.0

Description The issue is related to an integer overflow that can be triggered by large width image sizes in a crafted BMP image. This can cause a denial of service and potentially allow the execution of arbitrary code. The problem has been demonstrated using specific image files.

Recommendations For ACDSee Photo Manager version 9.0, consider avoiding the use of large width image sizes in BMP images until a fix is available. As a temporary workaround, restrict the processing of BMP images with unusually large dimensions to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-1943

Produtos afetados

Acdsee Photo Manager

Referências · 12

• 🔥 http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html · Exploit
• 🔥 https://exploit-db.com/exploits/29818 · Exploit
• http://securityreason.com/securityalert/2558 · Nota
• http://securityfocus.com/archive/1/archive/1/464726/100/0/threaded · Nota
• http://osvdb.org/34663 · Nota
• http://securityfocus.com/bid/23317 · Nota
• http://vupen.com/english/advisories/2007/1283 · Nota
• http://frsirt.com/english/advisories/2007/1283 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1943 · Nota de Segurança
• http://secunia.com/advisories/24779 · Aviso do Fabricante
• http://acdsee.com/support/knowledgebase/article?id=2800 · Nota
• http://securityfocus.com/archive/1/464726/100/0/threaded · Nota