26 April 2007, 11:22
Malware infestation through bmp files in Photoshop
A bug has been detected in the Creative Suite 2 and Creative Suite 3 versions of the Adobe Photoshop image editing software, encountered when malformed bitmap files are processed. These files with bmp, dib or rle extensions may trigger a buffer overflow that could be exploited by hackers for arbitrary code execution.
Marsu, who has detected this hole, has provided a sample exploit, which can be used to create manipulated bitmap files to exploit the problem, but does not provide more detailed information on this flaw. So far, Adobe has not published an update to fix this vulnerability. Until a patch is available, users of the affected Photoshop versions are advised only to open bitmap files from trusted sources.
- Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow, sample exploit published by Marsu
(ehe)
Print Version | Send by email
| Permalink: http://h-online.com/-732707
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
