Buffer overflow in Adobe Photoshop Cs5.5

CVE-2012-0275

Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.

Vulnerability class: Buffer Overflow

EPSS: 0.090 (94.7th percentile) — read the EPSS interpretation.

Affected products

Adobe Photoshop_cs5.5 — versions 12.0.1, 12.0.2, 12.0.3
Adobe Photoshop_cs6 — versions 13.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_SECTRACK)