Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Live Donald Trump's inauguration: Watch CBC's live coverage here
Follow CBC correspondents in Washington and around the world as new U.S. presidency begins
Analysis How history could make strange bedfellows of Obama and Trump: Keith Boag
There might come a day when Obama will be grateful it was Trump and not a purebred Republican who became the custodian of his legacy, Keith Boag writes.
Rescuers in Italy say there may be more avalanche survivors in hotel rubble
An Italian firefighter says rescue crews have indications of other survivors under the rubble of an avalanche-struck hotel in central Italy. Between six and eight survivors were located earlier Friday.
more »

Canada »

Inflation heats up to 1.5% in December as higher gas prices offset cheaper food
The cost of living in Canada increased by 1.5 per cent last month, as slightly more expensive gasoline prices helped offset slightly cheaper food prices.
Analysis French a major advantage for Conservative leadership contenders
Kevin O'Leary joins the Conservative leadership race as one of several candidates who lack proficiency in French. The electoral math suggests this puts O'Leary and others at a distinct disadvantage in their quests to become party leader and prime minister.
Analysis 'Embrace change': Canada cautioned to keep cool for Trump: Rosemary Barton video
There are many questions for the Canada-U.S. relationship on the eve of Donald Trump's presidency, and most answers aren't yet clear. What seems certain, though, writes Power and Politics host Rosie Barton, is that Ottawa will have to do more than just point to shared borders, history and trade to get some of the country's needs met.
more »

Politics »

Prior leaks of navy info were on RCMP's radar before vice-admiral's removal video
RCMP officers looked into a pair of information leaks related to navy projects prior to this week's suspension of a top admiral, CBC News has learned. News of the separate investigations comes as the Liberal government reassures allies the controversy involving Vice-Admiral Mark Norman has not compromised their security.
Analysis 'Embrace change': Canada cautioned to keep cool for Trump: Rosemary Barton video
There are many questions for the Canada-U.S. relationship on the eve of Donald Trump's presidency, and most answers aren't yet clear. What seems certain, though, writes Power and Politics host Rosie Barton, is that Ottawa will have to do more than just point to shared borders, history and trade to get some of the country's needs met.
Canada cuts $48M in tariffs to boost food manufacturing
As the incoming Trump administration talks about piling on new tariffs to discourage imports and protect American jobs, the Canadian government is quietly moving in the opposite direction. About 200 tariffs have been eliminated to make Canadian food manufacturers more competitive.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Updated Dimming star power: Do celebrities' anti-Trump voices matter? video
As stars pour out in protests around the inauguration, research suggests celebrities rarely have the power to substantially change people's political opinions
Arcade Fire deliver new song 'I Give You Power' on eve of U.S. inauguration
Arcade Fire is back with a new song that appears directly aimed at Donald Trump on the eve of his inauguration.
Actor Miguel Ferrer dead at 61, cousin George Clooney pays tribute
Miguel Ferrer, who brought stern authority to his featured role on CBS' hit NCIS: Los Angeles and, years earlier, to NBC crime drama Crossing Jordan, has died.
more »

Technology & Science »

Beware! Friends, family, secretly snooping on your Facebook account
A new study on "social insider attacks" — where attackers personally know their victims — estimates that 24 per cent of survey participants had accessed someone's Facebook account without them knowing.
'No smoking gun' found to explain hundreds of thousands of herring deaths
Alain Vezina, regional director of science at the Department of Fisheries and Oceans, says a combination of factors likely led to the fish kill.
Like humans, capuchin monkeys can determine probability, study finds
A study from the University of Toronto has found that capuchin monkeys are capable of statistical reasoning, which could suggest the ability evolved much earlier than once believed.
more »

Money »

Inflation heats up to 1.5% in December as higher gas prices offset cheaper food
The cost of living in Canada increased by 1.5 per cent last month, as slightly more expensive gasoline prices helped offset slightly cheaper food prices.
Tim Hortons owner launches app to pay-and-go with no lining up
The parent company of Tim Hortons and Burger King plans to launch an app Canada-wide this spring that would allow customers to order and pay in advance on their smartphone without lining up to pay a cashier.
U.S. airlines offer low-cost fares banning carry-on bags. Will Canada follow?
Both American and United Airlines will soon be offering a bare bones "basic economy" fare that excludes access to the overhead bin for carry-on. The same deal will soon be offered by major Canadian airlines, predicts one expert.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Max Parrot leads Canadian slopestyle sweep in Laax video
Max Parrot rode a strong third run to the top of an all-Canadian podium at the World Cup snowboard slopestyle event in Laax, Switzerland.
Hockey Night in Canada: Free live streams now on desktop & mobile
CBC Sports will provide free live streams of all Hockey Night in Canada games on all platforms on Saturday nights.
Road to the Olympic Games: Quebec's love affair with freestyle skiing video
Scott Russell reflects on Quebec's consistent love affair with freestyle skiing, even when directly competing with the NHL's Montreal Canadiens and the MLB's Montreal Expos.
more »

Diversions »

[an error occurred while processing this directive]
more »