PT-2010-3001 · Adobe · Photoshop Cs4

Gjoko Krstic · Published 2010-05-27 · Updated 2017-08-17 · CVE-2010-1296

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS4 versions prior to 11.0.2

Description The issue is related to multiple buffer overflows that can be triggered by crafted files, specifically .ASL, .ABR, or .GRD files. This can allow user-assisted remote attackers to execute arbitrary code.

Recommendations For Adobe Photoshop CS4 versions prior to 11.0.2, update to version 11.0.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of .ASL, .ABR, or .GRD files from untrusted sources until the update is applied.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-1296

Affected Products

Photoshop Cs4

References · 17

• 🔥 http://zeroscience.mk/codes/psstyle_bof.txt · Exploit
• 🔥 http://exploit-db.com/exploits/12752 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4940.php · Exploit
• 🔥 https://exploit-db.com/exploits/12751 · Exploit
• 🔥 http://zeroscience.mk/codes/psbrush_bof.txt · Exploit
• 🔥 http://exploit-db.com/exploits/12751 · Exploit
• 🔥 http://zeroscience.mk/codes/psgradient_bof.txt · Exploit
• 🔥 https://exploit-db.com/exploits/12753 · Exploit
• 🔥 http://exploit-db.com/exploits/12753 · Exploit
• 🔥 http://securityfocus.com/bid/40389 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4938.php · Exploit
• 🔥 https://exploit-db.com/exploits/12752 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1296 · Security Note
• http://adobe.com/support/security/bulletins/apsb10-13.html · Vendor Advisory