KLA10157 ACE vulnerability in Final Draft

A buffer overflow was found in Final Draft. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely a via specially designed file.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

Final-Draft

CVE list

CVE-2011-5059 critical

CVE-2011-5002 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Final Draft 8 versions 8.0.1 and earlier