Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Analysis Still 'the indispensable European'?: A look at Angela Merkel's dramatic reversal of fortune video
There is no more striking example of how fast political glory can fade than the astonishing and accelerating new perils facing German Chancellor Angela Merkel, Brian Stewart writes.
EgyptAir crash victims mourned as Egypt's tourism industry prepares to take another hit video
Marwa Hamdy was returning home on EgyptAir Flight 804 after visiting her sister in Paris, her favourite city, when her plane plunged into the Mediterranean, her husband told CBC News. Hamdy was one of two Canadians being mourned in the wake of the crash, which also dealt a devastating blow to an already battered tourism industry in Egypt.
Updated Mullah Haibatullah Akhundzada appointed new Afghan Taliban leader
A religious extremist was chosen Wednesday to be the new leader of the Afghan Taliban, just days after a U.S. drone strike killed his predecessor.
more »

Canada »

Analysis Canadians shrug off Justin Trudeau's elbow, polls suggest
While two polls published this week show that most Canadians are aware of the 'Elbowgate' controversy, a majority said the altercation in the House was much ado about nothing. And, the polls suggest, it has had no impact on the party's support.
Canada uses social media to curb laser attacks on planes
Calls to ban hand-held lasers that endanger aircraft crew and passengers are ramping up, and the federal government is turning to social media for help.
CRTC pushes cable providers, public to tell all about new $25 basic TV packs
The CRTC is calling on cable providers to publicly explain their $25 basic TV packages at hearings in September — but members of the public with something to say about the so-called "skinny" packages can weigh in online.
more »

Politics »

Stephen Harper to bow out of federal politics before next fall video
Stephen Harper will bow out of federal politics before Parliament resumes in the fall to pursue new business interests.
Analysis Canadians shrug off Justin Trudeau's elbow, polls suggest
While two polls published this week show that most Canadians are aware of the 'Elbowgate' controversy, a majority said the altercation in the House was much ado about nothing. And, the polls suggest, it has had no impact on the party's support.
Justin Trudeau to meet with Merkel, Hollande at G7 summit in Japan
Justin Trudeau will hold bilateral meetings with German Chancellor Angela Merkel and French President Francois Hollande at the Group of Seven summit in Japan.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Video Chris Hyndman's death 'shattered my life,' says Steven Sabados video
'It was a tragedy. I don't know what happened and I can't sort of pursue it,' Steven Sabados told CBC in his first TV news interview since the sudden death of his spouse and longtime TV co-host Chris Hyndman last summer.
'Do you need a little beat?' Obama uses light moment with Vietnamese rapper to espouse free speech
U.S. President Barack Obama's parting shot before leaving communist Vietnam: let people express themselves. He may have been referring to rap but the subtle message was aimed at his hosts who have been criticized for muzzling dissent.
Tragically Hip tour dates announced
One day after revealing that singer Gord Downie has terminal brain cancer, the Tragically Hip announced dates this morning for a summer tour.
more »

Technology & Science »

Updated Alberta's oilsands industry is a huge source of harmful air pollution, study says
Alberta's oilsands industry is one of the biggest sources in North America of harmful air pollutants called secondary organic aerosols, a new Environment Canada study has found.
New Smoke in Spain: Fort McMurray wildfire ash reaches Europe
Ash and soot from the Fort McMurray wildfire has drifted all the way to Europe, and could melt ice in the North Atlantic, says a fire ecologist.
Huge swarms of bats wreak destruction in Australian town video
More than 100,000 bats have descended on the holiday town of Batemans Bay in New South Wales, Australia, with one local politician declaring it a disaster after residents were hit with a wave of dirt and destruction.
more »

Money »

New TSX finishes above 14,000 for first time since August
The S&P/TSX composite index in Toronto racked up 100.89 points on Wednesday to settle at 14,053.74, the first time since August that it has finished above 14,000.
Peter Thiel bankrolled Hulk Hogan's lawsuit against Gawker, reports say
Billionaire tech investor Peter Thiel was secretly financing Hulk Hogan's recent lawsuit against Gawker as part of a long-simmering feud with the media company, media reports suggest.
Ford recalls 44,000 F-150 trucks in Canada over brake problem
Ford Motor Co. said Wednesday it is recalling about 271,000 F-150 trucks in North America, including almost 44,000 in Canada, over a front brake problem.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Analysis Are the Raptors really victims of bad refereeing? video
Raptors fans have howled at their team's foul-call deficit against Cleveland, but several factors could explain why fewer whistles are going Toronto's way in the Eastern Conference final.
Analysis 4 keys to Raptors stealing a win in Cleveland
The Eastern Conference final between the Toronto Raptors and Cleveland Cavaliers is knotted 2-2, with each team taking care of business at home. But in order for the Raptors to advance, they will need to find a way to steal a win on the road.
Preview Last chance for Canadian rugby 7s team to qualify for Olympics
Canada's men's rugby sevens team has one last chance to qualify for the Rio Games. In order to do that, they'll need to outlast 15 other teams at a tournament in Monaco who are vying for a single berth at the sport's reintroduction to the Olympics.
more »

Diversions »

[an error occurred while processing this directive]
more »