PT-2010-2984 · Adobe · Photoshop Cs4

Published 2010-05-04 · Updated 2010-05-11 · CVE-2010-1279

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS4 versions 11.x before 11.0.1

Description The issue allows user-assisted remote attackers to execute arbitrary code via a crafted TIFF file.

Recommendations For Adobe Photoshop CS4 versions 11.x before 11.0.1, update to version 11.0.1 to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-1279

Affected Products

Photoshop Cs4

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-1279 · Security Note
• http://vupen.com/english/advisories/2010/1049 · Vendor Advisory
• http://secunia.com/advisories/39711 · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb10-10.html · Vendor Advisory
• http://securityfocus.com/bid/39849 · Note