CVE-2012-1197 Information

Description

Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted \image dimension values\ in a BMP file which triggers a heap-based buffer overflow.

Reference

http://osvdb.org/79305 http://secunia.com/advisories/47450 http://www.securityfocus.com/bid/52047 https://exchange.xforce.ibmcloud.com/vulnerabilities/73242