CVE-2007-4344
Last modified
CVE-2007-4344 is a vulnerability of currently unknown severity. Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl plug-in, resulting in a heap-based buffer overflow.. EPSS estimates a 4.76% chance of exploitation in the next 30 days.
Description
Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in (1) a PSP image to the ID_PSP.apl plug-in or (2) an LHA archive to the AM_LHA.apl plug-in, resulting in a heap-based buffer overflow.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Acdsee | Photo Editor | 4.0 | Build 195 |
| Acdsee | Photo Manager | 9.0 | Build 108 |
| Acdsee | Pro Photo Manager | 8.1 | Build 99 |
References
- http://secunia.com/advisories/25952Patch, Vendor Advisory
- http://secunia.com/advisories/25952Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4344?
How severe is CVE-2007-4344?
How do I fix CVE-2007-4344?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4338index.php in Ryan Haudenschilt Family Connections (FCMS) bef…
- CVE-2007-4339Multiple PHP remote file inclusion vulnerabilities in PHPCen…
- CVE-2007-4340PHP remote file inclusion vulnerability in index.php in phpD…
- CVE-2007-4341PHP remote file inclusion vulnerability in adm/my_statistics…
- CVE-2007-4342PHP remote file inclusion vulnerability in include.php in PH…
- CVE-2007-4343Stack-based buffer overflow in IrfanView 3.99 and 4.00 allow…
- CVE-2007-4345Buffer overflow in IMail Client 9.22, as shipped with IPSwit…
- CVE-2007-4346The Job Engine (bengine.exe) service in Symantec Backup Exec…
- CVE-2007-4347Multiple integer overflows in the Job Engine (bengine.exe) s…
- CVE-2007-4348Cross-site scripting (XSS) vulnerability in the CAD service …
- CVE-2007-4349The Shared Trace Service (aka OVTrace) in HP Performance Age…
- CVE-2007-4350Cross-site scripting (XSS) vulnerability in the management i…
Are you affected by CVE-2007-4344?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST