CVE-2011-2747

2011-07-2818:00:00

mitre

www.cve.org

AI Score

7.4

Confidence

Low

EPSS

0.025

Percentile

90.2%

JSON

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.

References

osvdb.org/73980

picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1

secunia.com/advisories/45293

www.microsoft.com/technet/security/advisory/msvr11-008.mspx

exchange.xforce.ibmcloud.com/vulnerabilities/68735