CVE-2007-2365

Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-04-30

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Golive (Adobe)
• Illustrator (Adobe)
• Photoshop (Adobe)
• Photoshop Elements (Adobe)

References

• http://osvdb.org/35465
• http://osvdb.org/38063
• http://secunia.com/advisories/25044
• http://secunia.com/advisories/26846
• http://secunia.com/advisories/26864
• http://securitytracker.com/id?1018792
• http://www.adobe.com/support/security/bulletins/apsb07-13.html
• http://www.adobe.com/support/security/bulletins/apsb07-16.html
• http://www.adobe.com/support/security/bulletins/apsb07-17.html
• http://www.securityfocus.com/bid/23698
• http://www.vupen.com/english/advisories/2007/1577
• http://www.vupen.com/english/advisories/2007/3442
• http://www.vupen.com/english/advisories/2007/3443
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33956
• https://www.exploit-db.com/exploits/3812