Google Picasa JPEG Image Processing Integer Overflow Vulnerability

Bugtraq ID:	38384
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 24 2010 12:00AM
Updated:	Mar 18 2010 09:52AM
Credit:	Tielei Wang from ICST-ERCIS
Vulnerable:	Google Picasa for Mac 3.6.1 142 Google Picasa 3.6 Build 95.25
Not Vulnerable:	Google Picasa 3.6 Build 105.41

Google Picasa JPEG Image Processing Integer Overflow Vulnerability

Google Picasa is prone to a remote integer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.

Google Picasa JPEG Image Processing Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Picasa JPEG Image Processing Integer Overflow Vulnerability

Solution:
Reportedly, the vendor has released patches and Picasa 3.6 Build 105.41 to address this issue, but Symantec has not confirmed this. Please contact the vendor for more information.

Google Picasa JPEG Image Processing Integer Overflow Vulnerability

References:

• Picasa Homepage (Google)