CVE-2012-1197: Acd Systems Acdsee

High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days.

Integer overflow in the IDE_ACDStd.apl module for ACDSee 14.1 Build 137 allows remote attackers to execute arbitrary code via crafted "image dimension values" in a BMP file, which triggers a heap-based buffer overflow.

Affected products

• Acd Systems Acdsee: version 14.1_build_137 only

Published 2012-02-18. Last modified 2026-06-16.