Two vulnerabilities have been identified in various ACDSee products, which could be exploited by attackers to compromise a vulnerable system.
The first issue is caused by a buffer overflow error when parsing a specially crafted TIFF image, which could be exploited to crash an affected application or execute arbitrary code by tricking a user into opening a malicious image.
The second vulnerability is caused by a buffer overflow error when parsing specially crafted Fonts, which could be exploited to crash an affected application or execute arbitrary code by tricking a user into opening a malicious file.