ACDSee产品TIFF及字体文件解析缓冲区溢出漏洞

BUGTRAQ ID: 35175,35176 ACDSee是一款图象查看、转换、管理工具，可使用在Microsoft Windows操作系统下。 如果用户使用ACDSee产品打开了畸形的TIFF图形或字体文件的话，就可以触发多个缓冲区溢出，导致执行任意代码。 ACD Systems, Inc ACDSee 9.x ACD Systems, Inc ACDSee 11.x ACD Systems, Inc ACDSee 10.x ACD Systems, Inc ACDSee Photo Manager Pro 2.5 ACD Systems, Inc ACDSee Photo...

ACDSee Products TIFF and Font Parsing Buffer Overflow Vulnerabilities

VUPEN Security Research Advisory - VUPEN-SR-2009-03 Advisory URL: http://www.vupen.com/english/advisories/2009/1471 June 02, 2009 I. BACKGROUND ---------------------- ACDSee Photo Manager 2009 lets you quickly view and find photos, fix flaws, and share your favorites through e-mail, prints and fr...

Multiple ACDSee applications vulnerabilities

Buffer overflow on TIFF images and font parsing...

ACDSee XPM File Section Buffer Overflow

This module exploits a buffer overflow in ACDSee 9.0. When viewing a malicious XPM file with the ACDSee product, a remote attacker could overflow a buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

From ACDSee vulnerability see Trojan intrusion of new ideas-vulnerability warning-the black bar safety net

For ACDSee name, surely you are no stranger. However, recent ACDSee the use of the IDX. apl and IDEACDStd. apl, IDPSP. ap and AMLHA. apl plug-ins in the processing of XBM/XPM/PSP/LHA file buffer overflow vulnerability if a user opens with a long string of XBM/XPM/PSP/LHA file, then it is possible...

From ACDSee vulnerability see Trojan intrusion of new ideas-vulnerability warning-the black bar safety net

Source:Zhongguancun online For ACDSee name, surely you are no stranger. However, recent ACDSee the use of the IDX. apl and IDEACDStd. apl, IDPSP. ap and AMLHA. apl plug-ins in the processing of XBM/XPM/PSP/LHA file buffer overflow vulnerability if a user opens with a long string of XBM/XPM/PSP/LH...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

Buffer overflow

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager (versions 8.1, 9.0, 10.0) allows a user-assisted remote attacker to execute arbitrary code via a malformed XBM file. The issue arises during XBM processing and may be related to CVE-2007-6009. No remediation or exploit details are provided in the connected ...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

ACDSee XPM file section string buffer overflow

Added: 12/14/2007 CVE: CVE-2007-6009 BID: 26554 OSVDB: 45278 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl , IDEACDStd.apl , IDPSP.apl , and AMLHA.apl plug-ins could allow command execution when a user opens an X...

ACDSee XPM file section string buffer overflow

Added: 12/14/2007 CVE: CVE-2007-6009 BID: 26554 OSVDB: 45278 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl , IDEACDStd.apl , IDPSP.apl , and AMLHA.apl plug-ins could allow command execution when a user opens an X...

ACDSee XPM file section string buffer overflow

Added: 12/14/2007 CVE: CVE-2007-6009 BID: 26554 OSVDB: 45278 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl, IDEACDStd.apl, IDPSP.apl, and AMLHA.apl plug-ins could allow command execution when a user opens an XPM...

ACDSee XPM file section string buffer overflow

Added: 12/14/2007 CVE: CVE-2007-6009 BID: 26554 OSVDB: 45278 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl, IDEACDStd.apl, IDPSP.apl, and AMLHA.apl plug-ins could allow command execution when a user opens an XPM...

ACDSee产品多个插件缓冲区溢出漏洞

BUGTRAQ ID: 26554 CVECAN ID: CVE-2007-6009 ACDSee是一款图象查看、转换、管理工具，可使用在Microsoft Windows操作系统下。 ACDSee所使用的IDX.apl、IDEACDStd.apl、IDPSP.ap和AMLHA.apl插件在处理XBM/XPM/PSP/LHA文件时存在缓冲区溢出漏洞，如果用户受骗打开了带有超长字符串的XBM/XPM/PSP/LHA文件的话，就可能触发这些溢出，导致执行任意指令。 ACD Systems, Inc ACDSee Photo Manager 9.0 ACD Systems, Inc ACDSe...

Heap overflow

Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in 1 a PSP image to the IDPSP.apl plug-in or 2 an LHA archive to the...

CVE-2007-4344

Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in 1 a PSP image to the IDPSP.apl plug-in or 2 an LHA archive to the...

Integer overflow

Integer overflow in the IDPSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow...

CVE-2007-6007

Integer overflow in the IDPSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow...

CVE-2007-4344

CVE-2007-4344 involves heap-based buffer overflows in ACDSee products: PSP images processed by ID_PSP.apl and LHA archives by AM_LHA.apl, leading to remote code execution with user-assisted input. Affects ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 bui...