Title: ACDSee Products Plugins ID_PSP.apl and AM_LHA.apl Multiple Remote Buffer Overflow Vulnerabilities
Severity: HIGH
Description:
ACDSee Products are applications designed to manage and edit digital photographs.
ACDSee Products are prone to multiple buffer-overflow vulnerabilities because the applications fail to bounds-check user-supplied data before copying it into insufficiently sized buffers. The issues include:
- A heap-based buffer-overflow vulnerability in the 'ID_PSP.apl' plugin, which attackers can exploit by using a specially crafted PSP image file.
- An integer-overflow vulnerability in the 'ID_PSP.apl' plugin, which attackers can exploit to corrupt heap-based memory when the software processes PSP image files.
- A heap-based buffer-overflow vulnerability in the 'AM_LHA.apl' plugin that presents itself when the application processes LHA archives. This plugin is not available in the default configuration of ACDSee Photo Editor.
An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial of service.
These issues affect:
ACDSee Photo Manager 9.0
ACDSee Pro Photo Manager 8.1
ACDSee Photo Editor 4.0
Other versions may also be vulnerable.
Affected Products:
- ACD Systems Inc ACDSee Photo Editor 4.0
- ACD Systems Inc ACDSee Photo Manager 8.1
- ACD Systems Inc ACDSee Photo Manager 9.0
References:
- ACD Systems: Technical Note: Are there any known security issues using ACD software?
- ACDSee: ACDSee Homepage
- Secunia: Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
