KLA10030 ACE vulnerabilities in Adobe Photoshop

Multiple serious vulnerabilities have been found in Adobe Photoshop. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities

1. Use-after-free vulnerability can be exploited via specially designed TIFF image.
2. Buffer overflow vulnerability can be exploited via unknown vectors.
3. Stack-based buffer overflow vulnerability can be exploited via a long Collada asset element in a DAE file.
4. Heap-based buffer overflow vulnerability can be exploited via a specially designed TIFF image with SGI24LogLum compression.

Original advisories

Adobe bulletin

Related products

Adobe-Photoshop

CVE list

CVE-2012-2028 critical

CVE-2012-2052 critical

CVE-2012-0275 critical

CVE-2012-2027 critical

Solution

Update to latest version

Photoshop

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Adobe Photoshop CS5.1 versions 12.1 and earlier for Windows and Mac OS