Signature Detail

HTTP: Adobe Photoshop Asset Elements Stack Buffer Overflow

A buffer overflow vulnerability has been reported in Adobe Photoshop. The vulnerability is due to insufficient validation of Collada asset elements. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to download a malicious file. This can lead to arbitrary code execution in the context of the affected application.

Extended Description

Adobe Photoshop is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Successful exploits will compromise the affected application and possibly the underlying computer. Failed exploit attempts may cause a denial-of-service condition. Adobe Photoshop CS5 and CS5.1 are vulnerable; other versions may also be affected.

Affected Products

• Adobe Photoshop CS5
• Adobe Photoshop CS5.1

References

• BugTraq: 53464