Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

ACDSee Photo Manager 9.0 can crash via BMP files

CVE-2007-1943 · published 19 years ago
Summary

ACDSee Photo Manager 9.0 may stop working or run unwanted code when it opens specially crafted BMP images with very large width values. This could disrupt users or allow malicious actions. Update the software to the latest version or avoid opening BMP files from untrusted sources.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
acd_systems acdsee_photo_manager 9.0
cpe:2.3:a:acd_systems:acdsee_photo_manager:9.0:*:*:*:*:*:*:*
Original advisory text
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, ...
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
9% chance of attack within 30 days
Timeline
Published11 Apr 2007
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-1943 · NVD
Track software like this
Free during beta