Signature Detail

HTTP: AccuSoft ImageGear Malformed CLP File Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the AccuSoft ImageGear. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected server.

Extended Description

AccuSoft ImageGear Library is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker may exploit this issue by enticing a victim to open a malicious CLP file with an application using the affected library. Successful exploits can allow attackers to execute arbitrary code in the context of applications using the affected library. Failed exploit attempts will likely result in denial-of-service conditions. This issue affects Corel Paint Shop Pro Photo 11.20 and AccuSoft ImageGear 15.2; other versions may also be affected. NOTE: This issue was originally reported to affect only Corel Paint Shop Pro. However, further information reveals that the vulnerability lies in the AccuSoft ImageGear Library used by both applications.

Affected Products

• Corel Paint Shop Pro Photo 11.20

References

• BugTraq: 23604
• CVE: CVE-2007-2209