PT-2007-3534 · Acd Systems · Acdsee+2

Marsu · Published 2007-04-24 · Updated 2017-10-11 · CVE-2007-2193

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ACDSee version 9.0 Build 108 ACDSee Pro version 8.1 Build 99 ACDSee Photo Editor version 4.0 Build 195

Description A stack-based buffer overflow issue exists in the ID X.apl plugin, allowing user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string.

Recommendations For ACDSee version 9.0 Build 108, update to a version that fixes the issue in the ID X.apl plugin. For ACDSee Pro version 8.1 Build 99, update to a version that fixes the issue in the ID X.apl plugin. For ACDSee Photo Editor version 4.0 Build 195, update to a version that fixes the issue in the ID X.apl plugin.

Exploit

Fix

Related Identifiers

CVE-2007-2193

Affected Products

Acdsee

Acdsee Photo Editor

Acdsee Pro

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/acdsee_xpm.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16632 · Exploit
• 🔥 https://exploit-db.com/exploits/3776 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2193 · Security Note
• http://secunia.com/advisories/24994 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33812 · Note
• http://xforce.iss.net/xforce/xfdb/33812 · Note
• http://osvdb.org/35236 · Note
• http://frsirt.com/english/advisories/2007/1489 · Note
• http://vupen.com/english/advisories/2007/1489 · Note
• http://milw0rm.com/exploits/3776 · Note
• http://acdsee.com/support/knowledgebase/article?id=2800 · Note
• http://securityfocus.com/bid/23620 · Note