Acdsee CVE-2012-1197

CRITICAL

Numeric Errors (CWE-189)

2012-02-18 cve@mitre.org

RCE Buffer Overflow Acdsee Acd Systems

9.3

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

M

Confidentiality

C

Integrity

C

Availability

C

Lifecycle Timeline

1

CVE Published

Feb 18, 2012 - 00:55 cve.org

CRITICAL 9.3

DescriptionCVE.org

Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow.

AnalysisAI

Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-189. Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow. Affected products include: Acd Systems Acdsee.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Acdsee

View all

CVE-2020-29595 CRITICAL Act Now POC

PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting

CVE-2019-13252 HIGH This Week POC

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0. Rated high se

CVE-2019-13251 HIGH This Week POC

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000c47ff. Rated high se

CVE-2019-13250 HIGH This Week POC

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9c2f. Rated high se

CVE-2019-13249 HIGH This Week POC

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a. Rated high se

CVE-2019-13248 HIGH This Week POC

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450. Rated high severity (C

CVE-2019-13247 HIGH This Week POC

ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000024ed. Rated high severity (C

CVE-2017-2886 HIGH This Week

A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. Rated high sev

CVE-2021-26026 HIGH This Week

PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDS

CVE-2021-26025 HIGH This Week

PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDS

CVE-2019-15293 HIGH This Week

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. Rated high severity (CVSS 7.8), this vulnerabil

Same weakness CWE-189 – Numeric Errors

View all

CVE-2013-2094 HIGH POC

CVE-2015-3864 CRITICAL POC

CVE-2012-1182 CRITICAL POC

CVE-2015-1538 CRITICAL POC

CVE-2016-3645 CRITICAL POC

CVE-2015-3087 CRITICAL POC

CVE-2015-2470 CRITICAL POC

CVE-2013-4124 MEDIUM POC

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Share

CVE-2012-1197 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy