Adobe Photoshop '.GIF' File Remote Memory Corruption Vulnerability

Bugtraq ID:	49106
Class:	Unknown
CVE:	CVE-2011-2131
Remote:	Yes
Local:	No
Published:	Aug 09 2011 12:00AM
Updated:	Aug 23 2011 08:20AM
Credit:	Francis Provencher of Protek Research Lab
Vulnerable:	Adobe Photoshop CS5.1 Adobe Photoshop CS5
Not Vulnerable:

Adobe Photoshop '.GIF' File Remote Memory Corruption Vulnerability

Adobe Photoshop is prone to a remote memory-corruption vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Adobe Photoshop CS5 and CS5.1 are vulnerable.

Adobe Photoshop '.GIF' File Remote Memory Corruption Vulnerability

The following exploit is available. Not that Symantec has not verified the exploit. Please use caution before opening it.

http://www.protekresearchlab.com/exploits/PRL-2011-08.gif

Adobe Photoshop '.GIF' File Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe Photoshop '.GIF' File Remote Memory Corruption Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Adobe Photoshop CS5 GIF Remote Code Execution (Protek Research Lab)
  
• Security update available for Adobe Photoshop CS5 (Adobe)