CVEvulnerability

CVE-2007-2193

9.3 HIGH Published 2007-04-24 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-04-24
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.

Affected configurations

• acd systems acdsee 8.1 build 99 • acd systems acdsee 9.0 build 108 • acd systems photo editor 4.0 build 195

References

http://osvdb.org/35236 osvdb.org
http://secunia.com/advisories/24994 Vendor Advisory
http://www.acdsee.com/support/knowledgebase/article?id=2800 www.acdsee.com
http://www.securityfocus.com/bid/23620 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/1489 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33812 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/3776 www.exploit-db.com
http://osvdb.org/35236 osvdb.org
http://secunia.com/advisories/24994 Vendor Advisory
http://www.acdsee.com/support/knowledgebase/article?id=2800 www.acdsee.com
http://www.securityfocus.com/bid/23620 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/1489 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/33812 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/3776 www.exploit-db.com