PT-2012-2454 · Adobe · Photoshop Cs5+2

Publicado 2012-09-04 · Atualizado 2017-08-29 · CVE-2012-0275

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS5 versions 12.x through 12.0.4 Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0 Adobe Photoshop CS6 versions 13.x through 13.0.0

Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.

Recommendations For Adobe Photoshop CS5 versions 12.x through 12.0.4, update to version 12.0.5 or later. For Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0, update to version 12.1.1 or later. For Adobe Photoshop CS6 versions 13.x through 13.0.0, update to version 13.0.1 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0275

Produtos afetados

Photoshop Cs5

Photoshop Cs5.1

Photoshop Cs6

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78185 · Nota
• http://adobe.com/support/security/bulletins/apsb12-20.html · Aviso do Fabricante
• http://adobe.com/support/security/bulletins/apsb12-11.html · Aviso do Fabricante
• http://securityfocus.com/bid/55372 · Nota
• http://secunia.com/secunia_research/2012-29 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0275 · Nota de Segurança
• http://securitytracker.com/id?1027477 · Nota