CVE-2017-2886

ALTO 7.8CVE-2017-2886 · Published 11/12/2017 · updated 17/06/2026

In breve

CVE-2017-2886 è una vulnerabilità ALTO (CVSS 7.8) che riguarda ultimate (acdsee).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 63.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
ultimate acdsee	`= 10.0.0.292`	No fix yet

Description

A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in potential code execution. An attacker can send a specific .PSD file to trigger this vulnerability.

References

securityfocus.com/bid/102133 · Broken Link
talosintelligence.com/vulnerability_reports/TALOS-2017-0393 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free