PT-2012-3742 · Adobe · Photoshop Cs5.1+1

Published 2012-05-09 · Updated 2014-06-21 · CVE-2012-2027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CS5 versions 12.x through 12.0.4 Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0

Description A use-after-free issue allows remote attackers to execute arbitrary code via a crafted TIFF file.

Recommendations For Adobe Photoshop CS5 versions 12.x through 12.0.4, update to version 12.0.5 or later. For Adobe Photoshop CS5.1 versions 12.1.x through 12.1.0, update to version 12.1.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-2027

Affected Products

Photoshop Cs5

Photoshop Cs5.1

References · 4

• 🔥 https://exploit-db.com/exploits/18633 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2027 · Security Note
• http://adobe.com/support/security/bulletins/apsb12-11.html · Vendor Advisory
• http://securityfocus.com/bid/52634 · Note