CVE-2012-1197 : Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows r

Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow.

Published 2012-02-18 00:55:03

Updated 2025-04-11 00:51:22

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2012-1197

Acd Systems » Acdsee » Version: 14.1 Build 137
cpe:2.3:a:acd_systems:acdsee:14.1_build_137:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2012-1197

EPSS FAQ

8.91%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-1197

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2012-1197

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-1197

https://exchange.xforce.ibmcloud.com/vulnerabilities/73242

ACDSee BMP image buffer overflow CVE-2012-1197 Vulnerability Report
http://www.securityfocus.com/bid/52047

ACDSee BMP Image File Handling Remote Heap Buffer Overflow Vulnerability
http://osvdb.org/79305
http://secunia.com/advisories/47450

Sign in
Vendor Advisory

Jump to

Vulnerability Details : CVE-2012-1197

Products affected by CVE-2012-1197

Exploit prediction scoring system (EPSS) score for CVE-2012-1197

CVSS scores for CVE-2012-1197

CWE ids for CVE-2012-1197

References for CVE-2012-1197