PT-2007-6934 · Acd · Acdsee Photo Manager+1

Publicado 2007-11-15 · Atualizado 2018-10-15 · CVE-2007-6007

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ACDSee Photo Manager version 9.0 build 108 ACD ACDSee Pro Photo Manager version 8.1 build 99 ACDSee Photo Editor version 4.0 build 195

Description The issue is related to an integer overflow in the ID PSP.apl plug-in, which can be exploited by user-assisted remote attackers. This is achieved through a crafted PSP image that triggers a heap-based buffer overflow, allowing the execution of arbitrary code.

Recommendations For ACDSee Photo Manager version 9.0 build 108, update to a version that fixes the integer overflow issue in the ID PSP.apl plug-in. For ACDSee Pro Photo Manager version 8.1 build 99, update to a version that fixes the integer overflow issue in the ID PSP.apl plug-in. For ACDSee Photo Editor version 4.0 build 195, update to a version that fixes the integer overflow issue in the ID PSP.apl plug-in.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-6007

Produtos afetados

Acdsee Photo Editor

Acdsee Photo Manager

Referências · 8

• http://secunia.com/secunia_research/2007-73/advisory · Nota
• http://vupen.com/english/advisories/2007/3695 · Nota
• http://securityreason.com/securityalert/3367 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6007 · Nota de Segurança
• http://acdsee.com/support/knowledgebase/article?id=2800 · Correção
• http://securityfocus.com/archive/1/483188/100/0/threaded · Nota
• http://secunia.com/advisories/25952 · Aviso do Fabricante
• http://securityfocus.com/bid/26297 · Nota