Photoshop Buffer Overflow Vulnerability

Well, I’m a little slow on the draw noticing this one…

From Secunia:

Description:
Marsu has reported a vulnerability in Adobe Photoshop, which can be exploited by malicious people to compromise a user’s system.

The vulnerability is caused due to an error within the handling of Bitmap files (e.g. .BMP, .DIB, .RLE) and can be exploited to cause a stack-based buffer overflow via a specially crafted Bitmap file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in Adobe Photoshop CS2 and CS3. Other versions may also be affected.

Solution:
Do not open untrusted Bitmap files.

Provided and/or discovered by:
Marsu

Changelog:
2007-04-27: Added CVE reference.

Original Advisory:

http://milw0rm.com/exploits/3793

Article Link

[tags]Adobe, Photoshop, Vulnerability[/tags]

Posted by Dave Lewis on April 27, 2007. Filed under Vulnerability. You can follow any responses to this entry through the RSS 2.0. You can leave a response or trackback to this entry