CVE-2007-6009

Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a 1 XBM or 2 XPM file to a IDX.apl or b IDEACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be...

CVE-2007-6009

CVE-2007-6009 is a buffer-overflow vulnerability in ACDSee plug-ins used to process XPM files. Connected sources confirm a boundary/section-string overflow in ID_X.apl, IDE_ACDStd.apl, ID_PSP.apl, and AM_LHA.apl that could allow remote code execution when a user opens a crafted XPM file, with suc...

CVE-2007-6009

Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a 1 XBM or 2 XPM file to a IDX.apl or b IDEACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be...

CVE-2002-0196

The CVE-2002-0196 entry concerns ACD Incorporated CwpAPI 1.1. The vulnerability lies in GetRelativePath, which only checks if the server root is somewhere within the path rather than strictly preventing access beyond the web root. As a result, remote attackers could read or write files outside th...

CVE-2002-0196

GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root...