THREATIST.IORead the docs No ACD Systems vulnerabilities are listed in CISA KEV.
10 records
Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a l…
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3in…
Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow.
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0.
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0.
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0.
An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0.
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0.
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0.
ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed.