exploitDog

CVE-2007-4344

Опубликовано: 15 нояб. 2007

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl plug-in, resulting in a heap-based buffer overflow.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:acdsee:photo_editor:4.0:build_195:*:*:*:*:*:*

cpe:2.3:a:acdsee:photo_manager:9.0:build_108:*:*:*:*:*:*

cpe:2.3:a:acdsee:pro_photo_manager:8.1:build_99:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10347

Средний

9.3 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-vhww-rr55-xpgp

github

почти 4 года назад

Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl plug-in, resulting in a heap-based buffer overflow.

EPSS

Процентиль: 93%

0.10347

Средний

9.3 Critical

CVSS2

Дефекты

CWE-20