All the latest UK technology news, reviews and analysis

First flaws surface in new Photoshop

by Shaun Nichols

More from this author

01 May 2007

Be the first to comment

  • Tweet this

Adobe Photoshop users are being warned to remain vigilant after the discovery in recent days of two vulnerabilities. 

The flaws affect the way Photoshop processes certain types of images, and can be exploited when a user opens a specially crafted .png, .bmp, .dib or .rle bitmap image file.

Both vulnerabilities affect Photoshop CS2 and CS3. The .png vulnerability also affects Photoshop Elements 5.x.

When exploited, both vulnerabilities could allow an attacker to remotely execute code on a user's system. No active attacks targeting the vulnerabilities have been reported.

Discovery of both flaws is credited to a security researcher by the name of 'Marsu' on the milw0rm.com vulnerability disclosure site. 

Security company Secunia rated both vulnerabilities as 'highly critical', the company's second-highest alert level. Secunia advises users not to open untrusted .png, .bmp, .dib and .rle files. 

A spokesperson for Adobe said that the company is currently investigating the reports and declined any further comment.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

98%

0%

1%

0%

1%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

Software Design Architect (Windows Database Application)

Software Design Architect (Windows Database Application...

Lead Java Developer - Mobile- Digital- Amsterdam

Lead Java Developer - Fast growing, young and international...

Graduate Software Support Engineer

Job Specification Graduate Support Engineer...

c# or asp.net Software Developer

Job Specification For: Software Developer...

To send to more than one email address, simply separate each address with a comma.