OSVDB ID: 85437

Title: Adobe Photoshop SGI24LogLum Compressed TIFF Image Handling Overflow

Info

Disclosure
Sep 03, 2012

Discovery
Unknown

Dates

Exploit
Unknown

Solution
May 08, 2012

Description

 Adobe Photoshop is prone to an overflow condition. The photoshop.exe file fails to properly sanitize user-supplied input when decompressing a SGI24LogLum compressed TIFF image, which will result in a heap-based buffer overflow. With a specially crafted TIFF iamge, a context-dependent attacker can potentially execute arbitrary code.

Classification

 Location: Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Private
Disclosure: RBS Confirmed, Vendor Verified, Coordinated Disclosure

Solution

 Upgrade to version 12.0.5 or higher for CS5, 12.1.1 or higher for CS5.1, or 13.0.1 or higher for CS6, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Adobe Systems Incorporated

Photoshop

 12.0
12.1
13

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/85437