Vulnerability Name: | CCN-55525 | ||||||
Published: | 2010-01-08 | ||||||
Updated: | 2010-01-08 | ||||||
Summary: | Multiple ACDSee products are vulnerable to a buffer overflow, caused by improper bounds checking when handling malicious XMB files. By persuading a victim to open a specially-crafted XMB image file, a remote attacker could overflow a buffer and execute arbitrary code on the system the privileges of the victim or cause the application to crash. | ||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||
CVSS v2 Severity: | 6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)
| ||||||
Vulnerability Consequences: | Gain Access | ||||||
References: | Source: CCN Type: BugTraq Mailing List, Fri Jan 08 2010 TELUS Security Labs VR - ACDSee Systems ACDSee Products XBM File Handling Buffer Overflow Source: CCN Type: ACD Systems ACDSee Photo Software Source: CCN Type: OSVDB ID: 63643 ACDSee Multiple Products XBM File Handling Overflow Source: CCN Type: BID-37685 Multiple ACDSee Products 'XMB' File Remote Buffer Overflow Vulnerability Source: XF Type: UNKNOWN acdsee-xmb-bo(55525) | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |