PT-2010-3001 · Adobe · Photoshop Cs4

Gjoko Krstic · Publicado 2010-05-27 · Atualizado 2017-08-17 · CVE-2010-1296

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS4 versions prior to 11.0.2

Description The issue is related to multiple buffer overflows that can be triggered by crafted files, specifically .ASL, .ABR, or .GRD files. This can allow user-assisted remote attackers to execute arbitrary code.

Recommendations For Adobe Photoshop CS4 versions prior to 11.0.2, update to version 11.0.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of .ASL, .ABR, or .GRD files from untrusted sources until the update is applied.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-1296

Produtos afetados

Photoshop Cs4

Referências · 17

• 🔥 http://zeroscience.mk/codes/psstyle_bof.txt · Exploit
• 🔥 http://exploit-db.com/exploits/12752 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4940.php · Exploit
• 🔥 https://exploit-db.com/exploits/12751 · Exploit
• 🔥 http://zeroscience.mk/codes/psbrush_bof.txt · Exploit
• 🔥 http://exploit-db.com/exploits/12751 · Exploit
• 🔥 http://zeroscience.mk/codes/psgradient_bof.txt · Exploit
• 🔥 https://exploit-db.com/exploits/12753 · Exploit
• 🔥 http://exploit-db.com/exploits/12753 · Exploit
• 🔥 http://securityfocus.com/bid/40389 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4938.php · Exploit
• 🔥 https://exploit-db.com/exploits/12752 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1296 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58888 · Nota