PT-2012-2454 · Adobe · Photoshop Cs5+2

Published 2012-09-04 · Updated 2017-08-29 · CVE-2012-0275

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS5 versions 12.x through 12.0.4 Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0 Adobe Photoshop CS6 versions 13.x through 13.0.0

Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.

Recommendations For Adobe Photoshop CS5 versions 12.x through 12.0.4, update to version 12.0.5 or later. For Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0, update to version 12.1.1 or later. For Adobe Photoshop CS6 versions 13.x through 13.0.0, update to version 13.0.1 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0275

Affected Products

Photoshop Cs5

Photoshop Cs5.1

Photoshop Cs6

References · 7

• http://adobe.com/support/security/bulletins/apsb12-20.html · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb12-11.html · Vendor Advisory
• http://secunia.com/secunia_research/2012-29 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0275 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78185 · Note
• http://securityfocus.com/bid/55372 · Note
• http://securitytracker.com/id?1027477 · Note