Approved changes feed: RSS · Atom

cpe:2.3:a:acdsee:photo_manager:9.0:build_108:*:*:*:*:*:*

part: a version: 9.0 update: build_108

VendorAcdsee (cc148be6-810d-580a-9838-53bc2dd6153c)
ProductPhoto Manager (456b5382-af60-56d3-9ba7-74baa2ef6654)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6009 vulnerable 2026-06-03 14:28:28.323738 Details available
Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a (1) XBM or (2) XPM file to (a) ID_X.apl or (b) IDE_ACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be integer overflows rather than buffer overflows.
Published: 2007-11-15T22:00:00.000Z
Updated: 2024-08-07T15:54:25.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6007 vulnerable 2026-06-03 14:28:28.322454 Details available
Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow.
Published: 2007-11-15T22:00:00.000Z
Updated: 2024-08-07T15:47:00.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4344 vulnerable 2026-06-03 14:28:18.301292 Details available
Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl plug-in, resulting in a heap-based buffer overflow.
Published: 2007-11-15T22:00:00.000Z
Updated: 2024-08-07T14:53:55.928Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.