Adobe Photoshop TIFF Image Parsing Buffer Overflow Vulnerability

Last Update Date: 22 Mar 2012 09:46 Release Date: 22 Mar 2012 5567 Views

RISK: High Risk

TYPE: Clients - Graphics & Design

A vulnerability has been identified in Adobe Photoshop, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to an error when parsing TIFF images and can be exploited to cause a heap-based buffer overflow via a specially crafted TIFF image. Successful exploitation may allow execution of arbitrary code.

NOTE: Vendor supplied patch is currently unavailable.

Impact

Remote Code Execution

System / Technologies affected

Adobe Photoshop CS5 12.x

Solutions

NOTE: Vendor supplied patch is currently unavailable.
Workaround: Do not open untrusted TIFF images.

Vulnerability Identifier

No CVE information is available

Source

Secunia