CVE-2012-1197 Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-base...
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acd systems acdsee | = 14.1_build_137 | No fix listed |
References
- 79305 vdb-entry
- 47450 third-party-advisory vendor-advisory
- 52047 vdb-entry
- acdsee-bmp-image-bo(73242) vdb-entry