Adobe Photoshop Multiple File Types Remote Buffer Overflow Vulnerabilities
BID:40389
Info
Adobe Photoshop Multiple File Types Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 40389 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-1296 |
| Remote: | Yes |
| Local: | No |
| Published: | May 26 2010 12:00AM |
| Updated: | May 26 2010 08:32PM |
| Credit: | Gjoko Krstic of Zero Science Lab |
| Vulnerable: |
Adobe Photoshop CS3 10.0 Adobe Photoshop CS4 11.0.1 Adobe Photoshop CS4 11.0.0 Adobe Photoshop CS4 Adobe Photoshop CS3 Adobe Photoshop CS2 Adobe Photoshop CS |
| Not Vulnerable: |
Adobe PhotoShop CS4 11.0.2 |
Discussion
Adobe Photoshop Multiple File Types Remote Buffer Overflow Vulnerabilities
Adobe Photoshop is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data.
Attackers can exploit these issues to execute arbitrary code in the context of the currently logged-in user. Successful exploits will compromise the affected application and possibly the underlying computer. Failed exploit attempts may cause a denial-of-service condition.
Adobe Photoshop CS4 11.01 is vulnerable; other versions may also be affected.
Adobe Photoshop is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data.
Attackers can exploit these issues to execute arbitrary code in the context of the currently logged-in user. Successful exploits will compromise the affected application and possibly the underlying computer. Failed exploit attempts may cause a denial-of-service condition.
Adobe Photoshop CS4 11.01 is vulnerable; other versions may also be affected.
Exploit / POC
Adobe Photoshop Multiple File Types Remote Buffer Overflow Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim to open a malicious file.
The following proof of concepts are available:
An attacker can exploit these issues by enticing an unsuspecting victim to open a malicious file.
The following proof of concepts are available:
Solution / Fix
Adobe Photoshop Multiple File Types Remote Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Adobe Photoshop Multiple File Types Remote Buffer Overflow Vulnerabilities
References:
References: