PT-2011-4059 · Google · Google Picasa

Publicado 2011-07-28 · Atualizado 2017-08-29 · CVE-2011-2747

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Picasa versions prior to 3.6 Build 105.67

Description The issue arises from improper handling of invalid properties in JPEG images, allowing remote attackers to execute arbitrary code via a crafted image file.

Recommendations For versions prior to 3.6 Build 105.67, update to version 3.6 Build 105.67 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-2747

Produtos afetados

Google Picasa

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/68735 · Nota
• http://microsoft.com/technet/security/advisory/msvr11-008.mspx · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2747 · Nota de Segurança
• http://osvdb.org/73980 · Nota
• http://secunia.com/advisories/45293 · Aviso do Fabricante
• http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1 · Nota