HTTP: Adobe Products PNG File Handling Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Adobe Photoshop. A successful attack can lead to arbitrary code execution.

Extended Description

Multiple image editors are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successful exploits allow remote attackers to execute arbitrary machine code in the context of a vulnerable application. Failed exploit attempts likely result in denial-of-service conditions. The following are vulnerable: Adobe Photoshop CS2, CS3, and Elements 5.0 Corel Paint Shop Pro 11.20 Other versions may also be affected.

Affected Products

Adobe photoshop_elements

References

BugTraq: 23698

CVE: CVE-2007-2365

Short Name

HTTP:STC:ADOBE:PS-PNG-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Products PNG File Handling Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?