PT-2002-2478 · Acd Systems · Acdsee

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1756

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ACDSee version 4.0

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing an .ais file with a long file description field. This field is not properly handled when the file properties of the file are viewed.

Recommendations For ACDSee version 4.0, avoid viewing file properties of .ais files with long file description fields until a fix is available. As a temporary workaround, consider restricting the use of .ais files to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1756

Affected Products

Acdsee

References · 5

• 🔥 http://securityfocus.com/bid/4719 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1756 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9052 · Note
• http://online.securityfocus.com/archive/1/271963 · Note
• http://xforce.iss.net/xforce/xfdb/9052 · Note