Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id para…

published 2011-09-14 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2578

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 59.7%; EPSS 59.7% chance of exploitation in 30 days, percentile 99.1%
public exploits: 2; Metasploit, Exploit-DB

Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.

Timeline

2011-09-12 First public exploit (Metasploit exploit/windows/fileformat/acdsee_fotoslate_string)
2011-09-14 Published

Exploit prediction

59.69% chance of exploitation in the next 30 days, higher than 99.1% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

Metasploit exploit/windows/fileformat/acdsee_fotoslate_string ACDSee FotoSlate PLP File id Parameter Overflow metasploit exploit, good rank, 2011-09-12
EDB-17966 ACDSee FotoSlate - '.PLP' File 'id' Local Overflow (Metasploit) local, 2011-10-10

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secunia.com /advisories/44722
third-party-advisory, vendor-advisory
osvdb.org /75425
vdb-entry
exchange.xforce.ibmcloud.com /vulnerabilities/69723
vdb-entry
securityfocus.com /bid/49558
vdb-entry

Sources

CVE List CVE-2011-2595
NVD CVE-2011-2595

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary