Lucene search

K
cveMitreCVE-2007-6007
HistoryNov 15, 2007 - 10:46 p.m.

CVE-2007-6007

2007-11-1522:46:00
CWE-119
mitre
web.nvd.nist.gov
24
cve-2007-6007
acdsee
photo manager
pro photo manager
photo editor
integer overflow
remote code execution
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.159

Percentile

96.0%

Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow.

Affected configurations

Nvd
Node
acdseephoto_editorMatch4.0build_195
OR
acdseephoto_managerMatch9.0build_108
OR
acdseepro_photo_managerMatch8.1build_99
VendorProductVersionCPE
acdseephoto_editor4.0cpe:2.3:a:acdsee:photo_editor:4.0:build_195:*:*:*:*:*:*
acdseephoto_manager9.0cpe:2.3:a:acdsee:photo_manager:9.0:build_108:*:*:*:*:*:*
acdseepro_photo_manager8.1cpe:2.3:a:acdsee:pro_photo_manager:8.1:build_99:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.159

Percentile

96.0%

Related for CVE-2007-6007