Vulnerability Name: | CVE-2007-6009 (CCN-38235) | ||||||||
Assigned: | 2007-11-02 | ||||||||
Published: | 2007-11-02 | ||||||||
Updated: | 2008-11-15 | ||||||||
Summary: | Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a (1) XBM or (2) XPM file to (a) ID_X.apl or (b) IDE_ACDStd.apl. Note: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. Note: these might be integer overflows rather than buffer overflows. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C) 6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-119 | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: MITRE Type: CNA CVE-2007-6009 Source: OSVDB Type: UNKNOWN 45278 Source: CCN Type: ACD Software Knowledge Base Article 2800 Are there any known security issues using ACD software? Source: CONFIRM Type: UNKNOWN http://www.acdsee.com/support/knowledgebase/article?id=2800 Source: CCN Type: OSVDB ID: 42003 ACDSee Photo Manager Crafted XBM File Handling Remote Overflow Source: CCN Type: OSVDB ID: 45278 ACDSee Multiple Products IDE_ACDStd.apl Plugin XBM File Handling Overflow Source: BID Type: UNKNOWN 26554 Source: CCN Type: BID-26554 ACDSee Products Plugins ID_X.APL and IDE_ACDSTD.APL Multiple Remote Buffer Overflow Vulnerabilities Source: XF Type: UNKNOWN multiple-acdsee-xbm-xpm-bo(38235) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||
BACK |