CVE-2011-2595

Description

Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.

Affected products

• ACDSee / fotoslate4.0 – 4.0

References

• MISChttp://osvdb.org/75425
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/69723
• VENDOR_ADVISORYhttp://secunia.com/advisories/44722
• MISChttp://www.securityfocus.com/bid/49558