PT-2007-3288 · Acd Systems · Acdsee Photo Manager

Published 2007-04-10 · Updated 2018-10-16 · CVE-2007-1943

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ACDSee Photo Manager version 9.0

Description The issue is related to an integer overflow that can be triggered by large width image sizes in a crafted BMP image. This can cause a denial of service and potentially allow the execution of arbitrary code. The problem has been demonstrated using specific image files.

Recommendations For ACDSee Photo Manager version 9.0, consider avoiding the use of large width image sizes in BMP images until a fix is available. As a temporary workaround, restrict the processing of BMP images with unusually large dimensions to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-1943

Affected Products

Acdsee Photo Manager

References · 12

• 🔥 http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html · Exploit
• 🔥 https://exploit-db.com/exploits/29818 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1943 · Security Note
• http://secunia.com/advisories/24779 · Vendor Advisory
• http://securityreason.com/securityalert/2558 · Note
• http://securityfocus.com/archive/1/archive/1/464726/100/0/threaded · Note
• http://osvdb.org/34663 · Note
• http://securityfocus.com/bid/23317 · Note
• http://vupen.com/english/advisories/2007/1283 · Note
• http://frsirt.com/english/advisories/2007/1283 · Note
• http://acdsee.com/support/knowledgebase/article?id=2800 · Note
• http://securityfocus.com/archive/1/464726/100/0/threaded · Note