Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities (Mac OS X)

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities (Mac OS X)
Summary
This host is installed with Adobe Photoshop and is prone to buffer overflow vulnerabilities.
Impact
Successful exploitation will allow attackers to execute arbitrary code. Impact Level: System/Application
Solution
Upgrade to Adobe Photoshop version CS6 (13.0.1) or later, For updates refer to http://www.adobe.com/downloads/
Insight
- A boundary error in the 'Standard MultiPlugin.8BF' module fails to process a Portable Network Graphics (PNG) image, which allows attacker to cause a buffer overflow via a specially crafted 'tRNS' chunk size. - Improper validation in Photoshop.exe when decompressing SGI24LogLum-compressed TIFF images.
Affected
Adobe Photoshop version prior to CS6 (13.0) on Mac OS X
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities