Multiple ACDSee Products TIFF File Remote Buffer Overflow Vulnerability

Bugtraq ID:	35175
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 02 2009 12:00AM
Updated:	Jun 08 2009 08:59PM
Credit:	Nicolas Joly of VUPEN Security
Vulnerable:	Acdsystems ACDSee Pro Photo Manager 2.5 Acdsystems ACDSee Photo Manager 2009 0 Acdsystems ACDSee Photo Manager 2008 0 Acdsystems ACDSee Photo Manager 9.0 Acdsystems ACDSee Photo Manager 11.0 Acdsystems ACDSee Photo Manager 10.0
Not Vulnerable:

Multiple ACDSee Products TIFF File Remote Buffer Overflow Vulnerability

Multiple ACDSee products are prone to a remote buffer-overflow vulnerability because they fail to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

The following are vulnerable:

ACDSee Photo Manager 9.x, 10.x, 11.x, 2008, and 2009
ACDSee Pro Photo Manager 2.5

Multiple ACDSee Products TIFF File Remote Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Multiple ACDSee Products TIFF File Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple ACDSee Products TIFF File Remote Buffer Overflow Vulnerability

References:

• ACDSee Homepage (ACD Systems)
  
• ACDSee Products TIFF and Font Parsing Buffer Overflow Vulnerabilities (VUPEN Security)
  
• ACDSee Products TIFF and Font Parsing Buffer Overflow Vulnerabilities ("VUPEN Security Research" )