CVE-2010-1296

CRITICO 9.3CVE-2010-1296 · Published 27/05/2010 · updated 16/06/2026

In breve

CVE-2010-1296 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda photoshop cs4 (adobe).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 19.6%, superiore al 97.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
photoshop cs4 adobe	`= 11.0≤ 11.0.1`	No fix yet

Description

Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file.

References

adobe.com/support/security/bulletins/apsb10-13.html · Patch
exploit-db.com/exploits/12751
exploit-db.com/exploits/12752
exploit-db.com/exploits/12753
securityfocus.com/bid/40389 · Exploit
securitytracker.com/id
zeroscience.mk/codes/psbrush_bof.txt · Exploit
zeroscience.mk/codes/psgradient_bof.txt · Exploit
zeroscience.mk/codes/psstyle_bof.txt · Exploit
zeroscience.mk/en/vulnerabilities/ZSL-2010-4938.php · Exploit
zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php · Exploit
zeroscience.mk/en/vulnerabilities/ZSL-2010-4940.php · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/58888

Altre vulnerabilità di photoshop cs4

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free