ACDsee Pro Multiple Image Parsing Memory Corruption Vulnerabilities

Bugtraq ID:	54138
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 21 2012 12:00AM
Updated:	Jun 22 2012 11:10PM
Credit:	Francis Provencher via Secunia
Vulnerable:
Not Vulnerable:

ACDsee Pro Multiple Image Parsing Memory Corruption Vulnerabilities

ACDsee Pro is prone to multiple memory-corruption vulnerabilities.

Successful exploit of these issues allows an attacker to run arbitrary code in the context of the vulnerable application. Failed exploits can cause a denial-of-service condition.

ACDsee Pro 5.1 (Build 137) is vulnerable; other versions may also be affected.

ACDsee Pro Multiple Image Parsing Memory Corruption Vulnerabilities

The researcher who discovered these issues has created a proof-of-concept. Please see the references for more information.

ACDsee Pro Multiple Image Parsing Memory Corruption Vulnerabilities

Solution:
Updates are available. Please contact the vendor for more information.

ACDsee Pro Multiple Image Parsing Memory Corruption Vulnerabilities

References:

• ACDSee Pro Homepage (ACD Systems)
  
• ACDSee PRO CUR Image Processing Heap Overflow (Francis Provencher)
  
• ACDSee PRO GIF Image Processing Heap Overflow (Francis Provencher)
  
• ACDSee PRO PCT Image Processing Heap Overflow (Francis Provencher)
  
• ACDSee PRO RLE Image Processing Heap Overflow (Francis Provencher)