Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Obama calls for urgent action on climate change during Alaska visit
Submerged countries, abandoned cities and floods of refugees await the world barring urgent action on climate change, U.S. President Barack Obama warned Monday, painting a doomsday scenario as he opened a historic visit to Alaska.
ISIS bomb damage to Bel Temple in Palmyra significant, UN says
A satellite image on Monday shows that the main building of the ancient Temple of Bel in the Syrian city of Palmyra has been destroyed, a United Nations agency said. The image was taken a day after a massive explosion was set off near the 2,000-year-old temple in the city occupied by Islamic State of Iraq and Syria (ISIS) militants.
New Marijuana more popular than cigarettes, one U.S. college study suggests
More U.S. college students are making a habit of using marijuana, which has supplanted cigarettes as the smoke-able substance of choice among undergraduates who light up regularly, a study released Tuesday found.
more »

Canada »

B.C. storm: Why did the wind and rain do so much damage?
This weekend's storm hit Metro Vancouver hard, bringing trees crashing down and leaving power lines sparking. Why did the fierce wind and rain do so much damage?
Ashley Callingbull's Mrs. Universe win puts indigenous issues in the spotlight
The crowning of a Cree woman as the winner of the 2015 Mrs. Universe pageant is more than just a personal victory, it’s a chance to help confront some of the issues facing indigenous people in Canada, according to a band councillor.
Analysis Poll Tracker: Margin narrows again in 3-way race video
After a blip that gave the NDP a commanding lead, the contest is back to a three-way race. And one poll suggests who is capturing voters' attention, and what effect it is having on the campaign.
more »

Politics »

Analysis Stephen Harper avoids recession label on eve of GDP numbers video
Where Stephen Harper seemed to be a big fan of repeatedly pounding home the politically charged deficit word with Justin Trudeau, he now has become label averse when it comes to describing Canada's overall economy and possible technical recession.
Video Elizabeth May speaks on pharmacare in Halifax video
Green Party Leader Elizabeth May spoke at the Maritime Museum of the Atlantic in Halifax today and called for a national pharmacare program.
RCMP database on missing persons is overdue, over budget video
In 2010 the status of women minister, Rona Ambrose, announced a $10-million project to address the problem of missing and murdered indigenous women, including a new national database. Five years later, the database is long overdue, far over budget and has not solved any police cases to date.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

MTV Music Awards: Miley Cyrus, Nicki Minaj share uncomfortable exchange video
Kanye West gave a long rant at the MTV Video Music Awards as he apologized to Taylor Swift for taking her microphone in 2009, admitting "I don't understand awards shows" and claiming he would run for president in 2020.
Barack Obama to visit Running Wild with Bear Grylls in Alaska
U.S. President Barack Obama is set to venture into the Alaskan wilderness for a special episode of survivalist reality show Running Wild with Bear Grylls.
Saskatchewan boy stars in 'The Revenant' with Leonardo DiCaprio
Crews called a Saskatchewan boy to audition in Calgary for a role in 'The Revenant' earlier this summer. In four minutes, he was cast to play Leonardo DiCaprio's son.
more »

Technology & Science »

NASA picks Pluto spacecraft New Horizons' latest destination
A spacecraft that made a historic flyby of Pluto last July has a new destination — an icy rock that may reveal what the outer solar system was like shortly after it formed 4.6 billion years ago.
Most seabirds have plastic in their guts
As many as nine out of 10 of the world's seabirds likely have pieces of plastic in their guts, a new study estimates.
Prospector drones could be critical step to mining in space
Mining water in space is essential for pushing the limits of exploration and eventually establishing human colonies on celestial bodies. New flying "prospector" drones under development could be a critical first step to finding resources.
more »

Money »

Oil price jumps to $49 US a barrel as EIA data shows less crude pumped
The price of North America's dominant blend of oil jumps by almost 10 per cent in less than two hours to trade above $49 US a barrel for the first time in a month.
Toronto, Vancouver housing affordability deteriorates to 'risky' levels: RBC video
Rising prices in Vancouver and Toronto pushed housing affordability closer to “risky levels” in the second quarter of 2015, according to a report from RBC.
Alberta deficit forecast at $5.9B as province feels impact of low oil prices video
Alberta now forecasts it will end the year with a $5.9-billion deficit, up more than $800 million from March, as the steep drop in oil prices forces finance officials to revise estimates.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Roughriders fire coach Corey Chamblin, GM Brendan Taman
The Saskatchewan Roughriders on Monday night fired general manager Brendan Taman and head coach Corey Chamblin after the team dropped its ninth game in a row to start the CFL season, 35-13 in Ottawa on Sunday.
Recap Blue Jays' bats silenced in loss to Indians video
The Toronto Blue Jays offence was silenced in a 4-2 loss to the Cleveland Indians on Monday night at the Rogers Centre. Indians starter Danny Salazar allowed just two runs, while striking out 10 over seven innings, while Jays starter David Price allowed three runs over seven.
U.S. Open: Milos Raonic moves on, Vasek Pospisil eliminated video
Milos Raonic of Thornhill, Ont., advanced to the second round of the U.S. Open with a 6-4, 7-6 (8), 6-1 win over Tim Smyczek of the United States. Fellow Canadian Vasek Pospisil was eliminated by Andreas Haider-Maurer in five sets.
more »

Diversions »

[an error occurred while processing this directive]
more »