Adobe Camera Raw Plug-in TIFF Image Processing Multiple Vulnerabilities
Last Update Date:
14 Dec 2012 11:03
Release Date:
14 Dec 2012
4790
Views
RISK: High Risk
TYPE: Clients - Graphics & Design
Multiple vulnerabilities have been identified in Adobe Camera Raw Plug-in, which can be exploited by malicious people to compromise a user's system.
- An error in the "Camera Raw.8bi" plug-in when processing a LZW compressed TIFF image can be exploited to cause a heap-based buffer underflow via a specially crafted LZW code within an image row strip.
- An integer overflow error in the "Camera Raw.8bi" plug-in when allocating memory during TIFF image processing can be exploited to cause a heap-based buffer overflow via specially crafted image dimensions.
Impact
- Remote Code Execution
System / Technologies affected
- Photoshop Camera Raw version 7.2 and earlier versions for Windows and Macintosh
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update the plug-in to version 7.3 via the application's update mechanism.
Vulnerability Identifier
Source
Related Link
Share with