KLA10029 ACE vulnerabilities in Adobe Photoshop

Buffer overflow vulnerabilities were found in Adobe Photoshop. By exploiting this vulnerability malicious users can execute arbitrary code. These vulnerabilities can be exploited from the network at a point related to an unknown application via a specially designed file or TIFF image with SGI24LogLum compression.

Original advisories

Adobe bulletin

Related products

Adobe-Photoshop-CS6

CVE list

CVE-2012-0275 critical

CVE-2012-4170 critical

Solution

Update to latest version

Photoshop

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Adobe Photoshop CS6 version 13.0 for Windows and Mac OS