vendor:
Adobe Photoshop CS4 Extended
by:
Zero Science Lab
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Adobe Photoshop CS4 Extended
Affected Version From: CS4 Extended 11.0.0.0
Affected Version To: CS4 Extended 11.0.0.0
Patch Exists: YES
Related CWE: N/A
CPE: a:adobe:photoshop:11.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Microsoft Windwos XP Professional SP3 (English)
2009
Adobe Photoshop CS4 Extended 11.0 ABR File Handling Remote Buffer Overflow PoC
Adobe Photoshop CS4 Extended suffers from a buffer overflow vulnerability when dealing with .ABR (brushes) format file. The application failz to sanitize the user input resulting in a memory corruption, overwriting several memory registers which can aid the atacker to gain the power of executing arbitrary code or denial of service.
Mitigation:
Update to the latest version of Adobe Photoshop CS4 Extended