Google Picasa JPEG Image Processing Remote Code Execution Vulnerability (Windows)

  1. Network Vulnerabilities
  2. General
  3. Google Picasa JPEG Image Processing Remote Code Execution Vulnerability (Windows)
Summary
This host is installed with google picasa and is prone to remote code execution vulnerability.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code or cause a denial of service condition. Impact Level: System/Application
Solution
Upgrade to the Google Picasa 3.6 build 105.67 or later, For updates refer to http://picasa.google.com/thanks.html
Insight
The flaw is due to an unspecified error, when handling certain properties of an image file and can be exploited via a specially crafted JPEG image.
Affected
Google Picasa versions prior to 3.6 build 105.67
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities