CVE-2007-2193

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 37%

from disclosure to weapon1250 days

Published on NVDApr 24

1st PoC+1250d

metasploit+213d

exploitation probability

37%top 2% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/16632unverified cve_referencewww.exploit-db.com/exploits/3776unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/35236 http://secunia.com/advisories/24994 https://exchange.xforce.ibmcloud.com/vulnerabilities/33812 https://www.exploit-db.com/exploits/3776 http://www.acdsee.com/support/knowledgebase/article?id=2800 http://www.securityfocus.com/bid/23620 http://www.vupen.com/english/advisories/2007/1489