CVE-2011-2595

Acdsee Fotoslate - Memory Corruption

Title source: rule

Description

Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/17966
metasploit WORKING POC GOOD
by Parvez Anwar, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/acdsee_fotoslate_string.rb

Scores

EPSS 0.7503
EPSS Percentile 98.9%

Details

CWE
CWE-119
Status published
Products (1)
acdsee/fotoslate 4.0
Published Sep 14, 2011
Tracked Since Feb 18, 2026