Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Zimbabwe's new leader returns, promises jobs in 'new and unfolding democracy' video
Emmerson Mnangagwa said Wednesday in his first public speech since being announced as Zimbabwe's incoming leader that the country is witnessing a "new and unfolding democracy."
Daring defection of North Korean soldier captured in dramatic video video
North Korea's actions during a defector's escape at the Panmunjom border village earlier this month violated the armistice agreement ending the Korean War, a spokesperson for the UN command told reporters Wednesday as video of the attempt was released.
12 of 14 Hurricane Irma nursing home deaths ruled homicides
Authorities say the deaths of 12 of the 14 Florida nursing home patients who died after Hurricane Irma have been ruled homicides.
more »

Canada »

Teaching assistant who was sanctioned questions sincerity of Wilfrid Laurier University's apology video audio
Wilfrid Laurier University teaching assistant Lindsay Shepherd says she accepts an apology from the school's president and her supervising professor after she was sanctioned for showing a controversial video in class. But she also says the apology is just damage control.
Hackers only needed a phone number to track this MP's cellphone video
A CBC/Radio-Canada demonstration shows just how easy it is for hackers halfway across the world to spy on a Canadian MP’s phone calls and track his movements.
'I miss Ryker': scalded baby's sister says at mom's sentencing
The caregivers of baby Ryker Daponte-Michaud heard victim impact statements in court Wednesday after being found guilty of criminal negligence causing death and failing to provide the necessaries of life.
more »

Politics »

Hackers only needed a phone number to track this MP's cellphone video
A CBC/Radio-Canada demonstration shows just how easy it is for hackers halfway across the world to spy on a Canadian MP’s phone calls and track his movements.
Interviews underway for next RCMP commissioner
The federal government has whittled down the list of people it's considering for the position of RCMP commissioner. Its newly announced selection committee provides clues about what it wants in the new leader of the national police force.
Liberals detail $40B for 10-year national housing strategy, introduce Canada Housing Benefit video
The federal government has announced the details of its ten-year national housing strategy that includes the introduction of a National Housing Benefit for families that won't kick in until after the next federal election.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

David Cassidy, former Partridge Family teen actor, dead at 67 video
David Cassidy, the teen and pre-teen idol who starred in the 1970s sitcom The Partridge Family and sold millions of records as the musical group's lead singer, died Tuesday at age 67.
New allegations against Charlie Rose emerge at CBS News
​The morning show where Charlie Rose worked until being fired Tuesday is reporting that two women at CBS News claim that Rose grabbed them inappropriately, with one saying he also whispered a sexual innuendo.
Iran-based hacker charged with trying to extort HBO
An indictment filed Tuesday in Manhattan accuses Behzad Mesri of hacking into HBO's computer system in New York. It says he stole unaired episodes from shows including Curb Your Enthusiasm and The Deuce, story plot summaries and scripts for Game of Thrones and confidential cast and crew contact lists.
more »

Technology & Science »

High-energy 'ghost particles' can be stopped on way through Earth
High-energy subatomic particles nicknamed “ghost particles” for their ability to pass through just about anything can be stopped, scientists confirm.
Hackers only needed a phone number to track this MP's cellphone video
A CBC/Radio-Canada demonstration shows just how easy it is for hackers halfway across the world to spy on a Canadian MP’s phone calls and track his movements.
Uber can't confirm number of Canadians impacted in security breach: privacy commissioner
Canada's federal privacy commissioner says Uber Technologies Inc. can't confirm how many Canadians may be affected by an October 2016 security breach that the riding-hailing firm initially tried to cover up.
more »

Money »

Uber can't confirm number of Canadians impacted in security breach: privacy commissioner
Canada's federal privacy commissioner says Uber Technologies Inc. can't confirm how many Canadians may be affected by an October 2016 security breach that the riding-hailing firm initially tried to cover up.
'Cult-like worshippers' turn Canadian-invented Instant Pot into a phenomenon
The Ottawa inventor of the Instant Pot electric pressure cooker believes he can sell half a million devices in one day on Black Friday. The gadget has already set sales records on Amazon and continues to grow in popularity both in the US and Canada.
Freedom Mobile announces iPhone X dates, provides update on network rollout
Freedom Mobile will begin taking orders for the Apple iPhone X and iPhone 8 models starting Friday, with the smartphones in its stores on Dec. 8.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Profile Vey, Desjardins come full circle with Canadian Olympic hockey team video
In yet another twist of fate, Linden Vey finds himself back in the saddle of a team coached by Willie Desjardins. This time, it's with the Canadian men's Olympic hockey team.
Video 5 Things About Erik Guay video
He's one of the fastest skiers in Canadian history, but here are five other things that you may not know about Erik Guay.
Manny Osborne-Paradis focused on Olympic push video
Canada's Manny Osborne-Paradis makes his season debut in men's downhill at Lake Louise, Alta., on Saturday (CBC, CBCSports.ca, 2 p.m. ET), looking to carry over a strong finish to the 2016-17 season and a productive summer of strength training.
more »

Diversions »

[an error occurred while processing this directive]
more »