KLA10030
ACE vulnerabilities in Adobe Photoshop

Multiple serious vulnerabilities have been found in Adobe Photoshop. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities

1. Use-after-free vulnerability can be exploited via specially designed TIFF image.
2. Buffer overflow vulnerability can be exploited via unknown vectors.
3. Stack-based buffer overflow vulnerability can be exploited via a long Collada asset element in a DAE file.
4. Heap-based buffer overflow vulnerability can be exploited via a specially designed TIFF image with SGI24LogLum compression.

Adobe Photoshop CS5.1 versions 12.1 and earlier for Windows and Mac OS

Update to latest version
Photoshop

Adobe bulletin