Adobe Photoshop users are being warned to remain vigilant after a pair of vulnerabilities were reported in recent days.
The vulnerabilities affect the way that Photoshop processes certain types of images, and each can be exploited when a user opens a specially-crafted .png, .bmp, .dib or .rle bitmap image files. Both vulnerabilities affect Photoshop CS2 and CS3. The .png vulnerability also affects Photoshop Elements 5.x.
When exploited, both vulnerabilities could allow an attacker to remotely execute code on a user's system. No active attacks targeting the vulnerabilities have been reported. Discovery of both vulnerabilities is credited to a security reearcher by the name of "Marsu" on the milw0rm.com vulnerability disclosure site.
Security company Secunia rated both of the vulnerabilities as "highly critical", the company's second-highest alert level. Secunia advises users not to open untrusted .png, .bmp, .dib and .rle files.
A spokesperson said that the company is currently investigating the reports and declined any further comment.
First flaws surface in new Photoshop
By
Shaun Nichols
on May 1, 2007 4:11PM
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Why Most MSPs Are Invisible (And What the Smart Ones Are Doing Instead)
Promoted Content
Easily turn small, low-tech rooms into future-ready collaboration hubs
Promoted Content
Why Australia’s Industrial Leaders Are Turning to Dynamic Aspect for Dynamics 365 Business Central
Promoted Content
Have ticket queues become your quiet business risk?
Think Technology Australia deliver massive ROI to a Toyota dealership through SharePoint-powered, automated document management




