ACDSee Products Plugins ID_X.APL and IDE_ACDSTD.APL Multiple Remote Buffer Overflow Vulnerabilities

ACDSee Products Plugins ID_X.APL and IDE_ACDSTD.APL Multiple Remote Buffer Overflow Vulnerabilities

ACDSee Products are prone to multiple buffer-overflow vulnerabilities because the software fails to bounds-check user-supplied data before copying it into insufficiently sized buffers.

An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected software. Failed exploit attempts will result in a denial of service.

These issues affect:

ACDSee Photo Manager 9.0
ACDSee Pro Photo Manager 8.1
ACDSee Photo Editor 4.0

Other versions may also be vulnerable.

Update: Reportedly ACDSee Photo Manager 10.0 is vulnerable to one of these issues.