Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.

The version of Adobe Photoshop installed on the remote Mac OS X host is prior to CS6 13.0.1. It is, therefore, affected by remote code execution vulnerabilities due to multiple buffer overflows. A remote attacker, using a crafted file, can exploit these to execute arbitrary code.

The version of Adobe Photoshop installed on the remote host is less than CS6 13.0.1.  Such versions are affected by multiple buffer overflow vulnerabilities that could lead to code execution.

The version of Adobe Photoshop installed on the remote Windows host is prior to CS5 (12.0.5) or CS5.1 (12.1.1). It is, therefore, multiple arbitrary code execution vulnerabilities :

  - Multiple heap-based buffer overflow conditions exist due     to a failure to properly sanitize user-supplied input     when decompressing and handling TIFF image files. An     unauthenticated, remote attacker can exploit these     issues, by convincing a user to open a specially crafted     TIFF image file, to execute arbitrary code.
    (CVE-2012-2027, CVE-2012-2028)

  - A buffer overflow condition exists in the U3D.8bi plugin     due to a failure to properly sanitize user-supplied     input. An unauthenticated, remote attacker can exploit     this, by convincing a user to open a file containing a     specially crafted Collada (.dae) asset element, to     execute arbitrary code. (CVE-2012-2052)

  - A heap-based buffer overflow condition exists in     photoshop.exe due to a failure to properly sanitize     user-supplied input when decompressing a SGI24LogLum     compressed TIFF image. An unauthenticated, remote     attacker can exploit this, by convincing a user to open     a specially crafted TIFF image file, to execute     arbitrary code. (CVE-2012-0275)

ID	Name	Product	Family	Severity
62222	Adobe Photoshop CS6 for Mac Multiple RCE Vulnerabilities (APSB12-20) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
61775	Adobe Photoshop CS6 Multiple Buffer Overflow Vulnerabilities (APSB12-20)	Nessus	Windows	critical
59172	Adobe Photoshop < CS5 / CS5.1 Multiple Arbitrary Code Execution Vulnerabilities (APSB12-11)	Nessus	Windows	high

Detections

Analytics

CVE-2012-0275

high

Tenable Plugins

critical

critical

high