PT-2014-2237 · Adobe · Photoshop Cs5.1+2

Rgod · Publicado 2014-06-19 · Atualizado 2014-06-20 · CVE-2012-2052

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS5 versions 12.x through 12.0.4 Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0

Description A stack-based buffer overflow issue exists in the U3D.8BI library plugin. This issue can be exploited by remote attackers to execute arbitrary code via a long Collada asset element in a DAE file. For example, the cameraYFov value in the contributor comments element can be used to demonstrate this issue.

Recommendations For Adobe Photoshop CS5 versions 12.x through 12.0.4, update to version 12.0.5 or later. For Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0, update to version 12.1.1 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-2052

Produtos afetados

Photoshop Cs5

Photoshop Cs5.1

U3D.8Bi

Referências · 9

• 🔥 http://retrogod.altervista.org/9sg_photoshock_adv.htm · Exploit
• 🔥 http://seclists.org/bugtraq/2012/May/58 · Exploit
• 🔥 https://exploit-db.com/exploits/18862 · Exploit
• 🔥 http://securityfocus.com/bid/53464 · Exploit
• 🔥 http://retrogod.altervista.org/9sg_photoshock_u3d.htm · Exploit
• http://secunia.com/advisories/49160 · Nota
• http://adobe.com/support/security/bulletins/apsb12-11.html · Aviso do Fabricante
• http://osvdb.org/show/osvdb/81832 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2052 · Nota de Segurança