CVE-2017-2886 A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in pote...
HighCVSS 7.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acdsee ultimate | = 10.0.0.292 | No fix listed |
| ACDSee Ultimate | = 10,0,0,292 (IDE_PSD 5,7,690,1) | No fix listed |
References
- 102133 broken-link vdb-entry
- www.talosintelligence.com third-party-advisory