CVE-2007-6007 - Vulnerability Details - OpenCVE

Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Acdsee	Photo Editor Photo Manager Pro Photo Manager

Configuration 1 [-]

OR	cpe:2.3:a:acdsee:photo_editor:4.0:build_195::::::
	cpe:2.3:a:acdsee:photo_manager:9.0:build_108::::::
	cpe:2.3:a:acdsee:pro_photo_manager:8.1:build_99::::::

No data.

References

Link	Providers
http://secunia.com/advisories/25952
http://secunia.com/secunia_research/2007-73/advisory/
http://securityreason.com/securityalert/3367
http://www.acdsee.com/support/knowledgebase/article?id=2800
http://www.securityfocus.com/archive/1/483188/100/0/threaded
http://www.securityfocus.com/bid/26297
http://www.vupen.com/english/advisories/2007/3695

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-11-15T22:00:00

Updated: 2024-08-07T15:47:00.660Z

Reserved: 2007-11-15T00:00:00

Link: CVE-2007-6007

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-11-15T22:46:00.000

Modified: 2024-11-21T00:39:09.887

Link: CVE-2007-6007

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-11-02T00:00:00", "descriptions": [{"lang": "en", "value": "Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20071102 Secunia Research: ACDSee Products Image and Archive Plug-insBuffer Overflows", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/483188/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.acdsee.com/support/knowledgebase/article?id=2800"}, {"name": "ADV-2007-3695", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3695"}, {"name": "25952", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25952"}, {"name": "26297", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26297"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2007-73/advisory/"}, {"name": "3367", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3367"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-6007", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20071102 Secunia Research: ACDSee Products Image and Archive Plug-insBuffer Overflows", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/483188/100/0/threaded"}, {"name": "http://www.acdsee.com/support/knowledgebase/article?id=2800", "refsource": "CONFIRM", "url": "http://www.acdsee.com/support/knowledgebase/article?id=2800"}, {"name": "ADV-2007-3695", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3695"}, {"name": "25952", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25952"}, {"name": "26297", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26297"}, {"name": "http://secunia.com/secunia_research/2007-73/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2007-73/advisory/"}, {"name": "3367", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3367"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:47:00.660Z"}, "title": "CVE Program Container", "references": [{"name": "20071102 Secunia Research: ACDSee Products Image and Archive Plug-insBuffer Overflows", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/483188/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.acdsee.com/support/knowledgebase/article?id=2800"}, {"name": "ADV-2007-3695", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3695"}, {"name": "25952", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25952"}, {"name": "26297", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26297"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2007-73/advisory/"}, {"name": "3367", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3367"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-6007", "datePublished": "2007-11-15T22:00:00", "dateReserved": "2007-11-15T00:00:00", "dateUpdated": "2024-08-07T15:47:00.660Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:acdsee:photo_editor:4.0:build_195:*:*:*:*:*:*", "matchCriteriaId": "A8948DF3-7A78-4607-B3B0-C936B3C553F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:acdsee:photo_manager:9.0:build_108:*:*:*:*:*:*", "matchCriteriaId": "0C99826F-7ECF-495D-B8C0-9EAFDC425E8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:acdsee:pro_photo_manager:8.1:build_99:*:*:*:*:*:*", "matchCriteriaId": "306A23E6-74FF-40E5-A5D4-C6372A2907C7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in the ID_PSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow."}, {"lang": "es", "value": "Desbordamiento de entero en el plugin ID_PSP.apl para ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, y Photo Editor 4.0 build 195 permite a atacantes remotos con la complicidad del usuario ejecutar c\u00f3digo de su elecci\u00f3n mediante una imagen PSP manipulada que provoca un desbordamiento de b\u00fafer basado en mont\u00edculo."}], "id": "CVE-2007-6007", "lastModified": "2024-11-21T00:39:09.887", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-11-15T22:46:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/25952"}, {"source": "cve@mitre.org", "url": "http://secunia.com/secunia_research/2007-73/advisory/"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3367"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.acdsee.com/support/knowledgebase/article?id=2800"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/483188/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/26297"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/3695"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/25952"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/secunia_research/2007-73/advisory/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3367"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.acdsee.com/support/knowledgebase/article?id=2800"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/483188/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/26297"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/3695"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}