HTTP: Adobe Photoshop Asset Elements Stack Buffer Overflow

A buffer overflow vulnerability has been reported in Adobe Photoshop. The vulnerability is due to insufficient validation of Collada asset elements. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to download a malicious file. This can lead to arbitrary code execution in the context of the affected application.

Extended Description

Adobe Photoshop is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Successful exploits will compromise the affected application and possibly the underlying computer. Failed exploit attempts may cause a denial-of-service condition. Adobe Photoshop CS5 and CS5.1 are vulnerable; other versions may also be affected.

Affected Products

Adobe photoshop

References

BugTraq: 53464

CVE: CVE-2012-2052

URL: http://retrogod.altervista.org/9sg_photoshock_adv.htm

Short Name

HTTP:STC:ADOBE:PHOTOSHOP-ASSET

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Photoshop Asset Elements Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?