critical9.3Public exploit code
CVE-2007-1943
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large widt…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ACDSee 9.0 Photo Manager - Multiple '.BMP' Denial of Service Vulnerabilities2007-04-04 · dos · windows · Verified
Impact
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acd Systems | Acdsee Photo Manager | Version 9.0 |
References
- NVD record
- CVE.org record
- http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html
- http://osvdb.org/34663
- http://secunia.com/advisories/24779
- http://securityreason.com/securityalert/2558
- http://www.acdsee.com/support/knowledgebase/article?id=2800
- http://www.securityfocus.com/archive/1/464726/100/0/threaded
- http://www.securityfocus.com/bid/23317
- http://www.vupen.com/english/advisories/2007/1283
- http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html
- http://osvdb.org/34663
- http://secunia.com/advisories/24779
- http://securityreason.com/securityalert/2558
- http://www.acdsee.com/support/knowledgebase/article?id=2800
- http://www.securityfocus.com/archive/1/464726/100/0/threaded
- http://www.securityfocus.com/bid/23317
- http://www.vupen.com/english/advisories/2007/1283