PT-2007-3698 · Adobe · Photoshop Elements+3

Publicado

2007-04-30

·

Atualizado

2017-10-11

·

CVE-2007-2365

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions CS2 and CS3 Adobe Photoshop Elements version 5.0 Adobe Illustrator version CS3 Adobe GoLive version 9
Description A buffer overflow issue allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file. This issue can be exploited when a user opens a malicious .PNG file, potentially leading to the execution of arbitrary code.
Recommendations For Adobe Photoshop versions CS2 and CS3, update to a version that includes a fix for this issue. For Adobe Photoshop Elements version 5.0, update to a version that includes a fix for this issue. For Adobe Illustrator version CS3, update to a version that includes a fix for this issue. For Adobe GoLive version 9, update to a version that includes a fix for this issue.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-2365

Produtos afetados

Golive
Illustrator
Photoshop
Photoshop Elements