Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

CBC in Italy Survivors of Italian quake take stock of loved ones and property lost
Survivors in the small hilltop towns and villages in central Italy devastated by Wednesday's earthquake are beginning to take stock of the loss, with neighbours exchanging heartbreaking news of friends and relatives killed in the magnitude 6.2 quake.
Analysis 'The battle of ideas begins': Why the deal to end Colombia's 5-decade war is no guarantee of easy peace
As much as the deal to end Colombia's five-decade war has been cheered in the South American country, the accord is also extremely controversial because the FARC rebel group is so widely despised, John Otis writes from Bogota.
Canadian among the dead in Italy's earthquake
A Canadian citizen is among the dead in the devastating earthquake in Italy that killed at least 250 people yesterday, Foreign Affairs Minister Stéphane Dion says.
more »

Canada »

Updated Union files notice of job action with Canada Post, but open to more talks
The biggest union at Canada Post says it has filed a 72-hour notice of job action, but is willing to withdraw it if the Crown corporation agrees to an extension on negotiations.
Second switched-at-birth case discovered at Norway House Indian Hospital
Two men from a northern Manitoba First Nation have discovered they were switched at birth at a federally run hospital nearly 40 years ago. It's the second known case of infants being switched at birth in 1975 at the same hospital.
Trudeau tells Liberal caucus to get back to basics and take the long view
Prime Minister Justin Trudeau gave his caucus a pep talk in the Saguenay region of Quebec Thursday, at the start of what will be two days of meetings. He told them to take the long view and be ready for what could be a bumpy fall in Parliament.
more »

Politics »

Secret cabinet document lost at DFO during Hunter Tootoo's final days as minister
A secret cabinet document, kept at the Department of Fisheries and Oceans, was lost while under former minister Hunter Tootoo's care, CBC News has learned. Staff noticed the file was missing during a routine audit five days before Tootoo resigned from cabinet in the spring.
Trudeau tells Liberal caucus to get back to basics and take the long view
Prime Minister Justin Trudeau gave his caucus a pep talk in the Saguenay region of Quebec Thursday, at the start of what will be two days of meetings. He told them to take the long view and be ready for what could be a bumpy fall in Parliament.
Updated More Canadians travelling abroad to join ISIS, other terrorist groups, report says
The number of people with Canadian connections suspected of travelling abroad to fight for ISIS and other terrorist groups has increased to 180, according to a Public Safety Canada report on the threat of terrorism to the country.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

U.S. Homeland Security investigating Leslie Jones website hack
Department of Homeland Security investigators said Thursday they are investigating the hack of Leslie Jones' website that revealed several private details of the actress-comedian's life.
Photos Dwayne Johnson tops Forbes list of highest-paid actors
Dwayne Johnson elbowed Robert Downey Jr. aside to become the highest-paid actor with a fast and furious income of $64.5 million US, according to Forbes magazine.
CBC BOOKS 75 fascinating facts for the 75th anniversary of Archie Comics
When clumsy redhead Archie Andrews made his debut, he couldn't have been more different from the plethora of superheroes in comics at the time. But 75 years later, the Riverdale gang's hijinks continue to entertain readers.
more »

Technology & Science »

Apple boosts iPhone security after Mideast spyware discovery
A botched attempt to break into the iPhone of an Arab activist using hitherto unknown espionage software has triggered a global upgrade of Apple's mobile operating system, researchers said Thursday.
WhatsApp is going to share your phone number with Facebook
Global messaging service WhatsApp says it will start sharing the phone numbers of its users with Facebook, its parent company. That means WhatsApp users could soon start seeing more targeted ads and friend suggestions on Facebook.
Whirling disease in fish found in Banff lake a 1st in Canada, officials say
The first known Canadian case of whirling disease in fish has been found in Johnson Lake in Banff National Park.
more »

Money »

Updated Union files notice of job action with Canada Post, but open to more talks
The biggest union at Canada Post says it has filed a 72-hour notice of job action, but is willing to withdraw it if the Crown corporation agrees to an extension on negotiations.
Mylan deepens discount on some EpiPen sales in U.S. after criticism
Mylan, in the face of heated criticism over price hikes for its EpiPen emergency allergy treatment, is bulking up programs that help patients pay for the drug.
TD, CIBC results beat expectations with higher profits
The parade of Canadian banks reporting solid earnings continued Thursday as TD Bank and CIBC both posted third-quarter earnings that topped the average expectations of analysts.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
How efficient was Canada's performance at Rio 2016?
Team Canada equalled Atlanta 1996 with 22 medals, the country's best-ever total at a non-boycotted Games. But how "efficient" was it?
Bautista back from DL as Jays enter stretch run
Toronto Blue Jays slugger Jose Bautista has been reinstated from the disabled list and will bat leadoff in Thursday's finale of the Jays' three-game series with the Los Angeles Angels at Rogers Centre.
Shawn Barber can't bounce back from Olympic letdown video
Shawn Barber, after a disappointing finish in Rio at the Olympic Games, couldn't bounce back into top form at Thursday's Diamond League meeting in Lausanne, Switzerland.
more »

Diversions »

[an error occurred while processing this directive]
more »