• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

ACDSee Products Plugins ID_PSP.apl and AM_LHA.apl Multiple Remote Buffer Overflow Vulnerabilities

ACDSee Products are prone to multiple buffer-overflow vulnerabilities because the software fail to bounds-check user-supplied data before copying it into insufficiently sized buffers.

An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected software. Failed exploit attempts will result in a denial of service.

These issues affect:

ACDSee Photo Manager 9.0
ACDSee Pro Photo Manager 8.1
ACDSee Photo Editor 4.0

Other versions may also be vulnerable.