This sort of exploit is harder to pull off because of the need for user action. But, as PT Barnum used to say “there is a sucker born every day.” Maybe that should be every hour. In any case, Secunia has issued a highly critical warning in regards to how some Photoshop products handle these PNG files. It seems that specially crafted PNG files will allow remote execution of arbitrary code on the victim machine.
“The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file.”
Products affected:
-Photoshop CS2
-Photoshop CS3
-Photoshop Elements 5.0
-Corel Paint Shop Pro 11.20
Sources: Secunia, Milw0rm
If you would like to make a comment, please fill out the form below.
Recent Comments