Exploit code posted for critical Adobe Photoshop flaw

Exploit code posted for critical Adobe Photoshop flaw

Summary: Photoshoppers, be careful. Publicly available exploit code for a serious security flaw in Adobe Photoshop could allow attackers to take complete control of your Windows machine.

SHARE:

Photoshoppers, be careful.

Publicly available exploit code for a serious security flaw in Adobe Photoshop could allow attackers to take complete control of your Windows machine, according to an advisory from FrSIRT.

Adobe logoThe flaw, rated critical, is caused by buffer overflow errors when handling a malformed "BMP", "DIB" or "RLE" file.

"[This could be exploited by attackers to take complete control of an affected system by tricking a user into opening a specially crafted file using a vulnerable application," FrSIRT said.

Affected products include Adobe Photoshop CS2 and Adobe Photoshop CS3.

The exploit code, available at  Milw0rm.com, has been successfully tested against Windows XP Service Pack 2.

Separately, an exploit for an equally serious flaw in Corel Paint Shop Pro is also in circulation.  This also puts users at risk of code execution attacks using rigged .CLP files. 

There are no patches available for these vulnerabilities.  The standard advice applies:  Be careful when opening files from untrusted sources. 

Topic: Enterprise Software

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

0 comments
Log in or register to start the discussion