[PCWorks] Adobe Photoshop GIF Processing Memory Corruption Vulnerability

  • From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
  • Date: Thu, 11 Aug 2011 04:40:52 -0500

TITLE:
Adobe Photoshop GIF Processing Memory Corruption Vulnerability

Criticality level: Highly critical
Impact:  System access
Where:  From remote

Software:  Adobe Photoshop CS5 12.x

SECUNIA ADVISORY ID:
http://secunia.com/advisories/45587/

DESCRIPTION:
A vulnerability has been reported in Adobe Photoshop, which can 
be
exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the 
processing of
GIF images, which can be exploited to cause a memory corruption 
by
tricking a user into opening a specially crafted GIF image.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions CS5 and CS5.1 (12.0 
and
12.1) and prior for Windows and Macintosh.

SOLUTION:
Apply the patches.

ORIGINAL ADVISORY:
APSB11-22:
http://www.adobe.com/support/security/bulletins/apsb11-22.html


=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

Other related posts:

  • » [PCWorks] Adobe Photoshop GIF Processing Memory Corruption Vulnerability - Clint Hamilton-PCWorks Admin