| |
Vulnerability in plug-ins ID_X.apl, IDE_ACDStd.apl, ID_PSP.apl, and AM_LHA.apl could allow remote code execution.
The vulnerability is caused due to a boundary error within the ID_X.apl, IDE_ACDStd.apl, ID_PSP.apl, and AM_LHA.apl plug-ins when handling XBM/XPM/PSP/LHA files. This can be exploited to cause a buffer overflow via a XBM/XPM/PSP/LHA file with an overly long section string.
Successful exploitation allows execution of arbitrary code.
To fix this security issue customers should apply the update immediately.
Download and run the installer from here.
This issue has been resolved in ACDSee 2009 and ACDSee Pro 2.5. |
Print Answer
Email Answer