Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-0275

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2012-0275
Last Modified 18 Apr 2013 11:18:22
Published 04 Sep 2012 07:04:48
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2012-0275

Summary

Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.

Vulnerable Systems

Application

  • Adobe Photoshop Cs5.5 12.0.1

  • Adobe Photoshop Cs5.5 12.0.2

  • Adobe Photoshop Cs5.5 12.0.3

  • Adobe Photoshop Cs5.5 12.0.4

  • Adobe Photoshop Cs5.5 12.1

  • Adobe Photoshop Cs6 13.0


References

CONFIRM - http://www.adobe.com/support/security/bulletins/apsb12-20.html

CONFIRM - http://www.adobe.com/support/security/bulletins/apsb12-11.html

MISC - http://secunia.com/secunia_research/2012-29/

XF - adobe-photoshop-unspec-bo(78185)

BID - 55372

SECTRACK - 1027477

Related Patches

Adobe APSB12-20 Photoshop CS6 13.0.1 for Windows (Update) (All Languages) (See Notes)


Last Updated: 27 May 2016 11:02:08