This application requires Javascript for optimal performance.

ACDSee.TIFF.Buffer.Overflow

Release Date

Jun 25, 2009

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a buffer-overflow vulnerability in ACDSee.

The vulnerability is caused by an error when the vulnerable software handles a malicious .tiff file. It allows a remote attacker to execute arbitrary code via sending a crafted .tiff file.

Affected Products

ACDSee 9.x
ACDSee Photo Manager 10.x
ACDSee Photo Manager 2009 11.x
ACDSee Pro 2 Photo Manager 2.x

Recommended Actions

Do not open untrusted .tiff files.

Coverage

IPS
VCM

Reference/s

http://www.securityfocus.com/bid/35175 (BugTraq)

Reference: VID-17485