FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-1943

This CVE name corresponds to:

Entered	Topic
2007-04-30	p5-Imager -- possibly exploitable buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-1943 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-1943
Phase	Assigned(20070410)

Description

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp.

References

Source	Reference
BUGTRAQ	20070404 Several Windows image viewers vulnerabilities
MISC	http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html
MISC	http://www.acdsee.com/support/knowledgebase/article?id=2800
BID	23317
VUPEN	ADV-2007-1283
OSVDB	34663
SECUNIA	24779
SREASON	2558