CVE-2007-6009 - CVE House
Back to Database
Status published Critical CVE-2007-6009

Multiple buffer overflows in ACD products allow user-assisted remote attackers...

Vulnerability Description

Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a (1) XBM or (2) XPM file to (a) ID_X.apl or (b) IDE_ACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be integer overflows rather than buffer overflows.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6009

Credits & Attribution

No credits recorded in the NVD database.

References

More from acdsee

View All →
CVE-2021-26026
PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User...
High 7.8
CVE-2021-26025
PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User...
High 7.8
CVE-2020-29595
PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build...
Critical 9.8
CVE-2019-15293
An issue was discovered in ACDSee Photo Studio Standard 22.1...
High 7.8
CVE-2019-13252
ACDSee Free 1.1.21 has a User Mode Write AV starting...
High 7.8

Affected Vendor

Affected Software

photo editor, photo manager, pro photo manager
Vulnerable Versions:
4.0, 9.0, 8.1

Timeline

Official Publish: November 15th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.