ACDSee FotoSlate PLP File id Parameter Overflow

This module exploits a buffer overflow in ACDSee FotoSlate 4.0 Build 146 via a specially crafted id parameter in a String element. When viewing a malicious PLP file with the ACDSee FotoSlate product, a remote attacker could overflow a buffer and execute arbitrary code. This exploit has been tested on systems such as Windows XP SP3, Windows Vista, and Windows 7.

Search Other Modules

Exploit Rank

• Good

Exploit Authors

• Parvez Anwar < >
• juan vazquez < >

Vulnerability References

• CVE-2011-2595
• OSVDB-75425
• BID-49558

Exploit Targets

• 0 - ACDSee FotoSlate 4.0 Build 146 (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/fileformat/a-pdf_wav_to_mp3
• exploit/windows/fileformat/acdsee_xpm
• exploit/windows/fileformat/activepdf_webgrabber
• exploit/windows/fileformat/adobe_collectemailinfo
• exploit/windows/fileformat/adobe_cooltype_sing
• exploit/windows/fileformat/adobe_flashplayer_button
• exploit/windows/fileformat/adobe_flashplayer_newfunction
• exploit/windows/fileformat/adobe_flatedecode_predictor02
• exploit/windows/fileformat/adobe_geticon
• exploit/windows/fileformat/adobe_illustrator_v14_eps

Exploit Usage Information

Exploit Module Options