CVE-2007-2193

2007-04-2417:19:00

[email protected]

web.nvd.nist.gov

cve-2007-2193

id_x.apl

acdsee

buffer overflow

remote code execution

xpm file

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.944 High

EPSS

Percentile

99.2%

JSON

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

acd_systemsacdseeMatch8.1_build_99pro

acd_systemsacdseeMatch9.0_build_108

acd_systemsphoto_editorMatch4.0_build_195

CPENameOperatorVersion
acd_systems:acdseeacd systems acdseeeq8.1_build_99
acd_systems:acdseeacd systems acdseeeq9.0_build_108
acd_systems:photo_editoracd systems photo editoreq4.0_build_195

CPE	Name	Operator	Version
acd_systems:acdsee	acd systems acdsee	eq	8.1_build_99
acd_systems:acdsee	acd systems acdsee	eq	9.0_build_108
acd_systems:photo_editor	acd systems photo editor	eq	4.0_build_195