CVE-2007-2193: Acd Systems Acdsee

High severity, CVSS 9.3. EPSS: 36.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.

Affected products

• Acd Systems Acdsee: version 8.1_build_99 only; version 9.0_build_108 only
• Acd Systems Photo Editor: version 4.0_build_195 only

Published 2007-04-24. Last modified 2026-06-16.