Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

SPECIAL REPORT CBC goes to the front lines in the battle for Aleppo
Aleppo is 'the jewel of Syria.' It's also where the government is hoping to win the Syrian civil war, writes Margaret Evans.
Search for survivors continues in Indonesia as death toll climbs to 102
Rescue workers, soldiers and police combed through the rubble of a devastated town in Indonesia's Aceh province Thursday, resuming a search for earthquake survivors that was halted at night by rain and blackouts.
Motion to impeach South Korea's president introduced
South Korea's parliament introduced a bill on Thursday to impeach President Park Geun-hye, setting in motion a vote to oust the embattled leader engulfed in an influence-peddling scandal.
more »

Canada »

Search-plane decision ends 12-year procurement odyssey
A 12-year military procurement odyssey, meant to replace the air force's nearly 50-year-old Buffalo search planes, will finally come to an end on Thursday. The Liberal government has chosen the Airbus C-295 transport as the country's next fixed-wing search-and-rescue plane, according to defence and industry sources
Canada's record on First Nations child welfare to face scrutiny in Washington
The Assembly of First Nations regional chief in Manitoba is warning the state of First Nations child welfare system is in such a sorry state that is akin to subjecting kids to genocide.
North Vancouver homeowners fight 361% increase in property assessment — and lose
As property assessments are on the rise in B.C., a recent appeal from North Vancouver shows how municipal plans to densify left one owner with an $18,000 property tax bill.
more »

Politics »

Plan to meet or exceed Canada's 2030 climate change target to be signed on Friday
Canada's first ministers are finalizing the details of a national climate change strategy that will be officially announced at a high-level meeting in Ottawa on Friday.
Environmentalists have impoverished First Nations, pro-pipeline chief says
Kinder Morgan's Trans Mountain pipeline has been vehemently opposed by many First Nations groups, but voices of dissent emerged Wednesday to launch a strong defence of the oil patch.
Search-plane decision ends 12-year procurement odyssey
A 12-year military procurement odyssey, meant to replace the air force's nearly 50-year-old Buffalo search planes, will finally come to an end on Thursday. The Liberal government has chosen the Airbus C-295 transport as the country's next fixed-wing search-and-rescue plane, according to defence and industry sources
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

YouTube showcases 2016's most popular online videos
Ahead of this year's YouTube Rewind, the company also released a list of the clips, music videos and trailers that 'captured the imaginations of Canadians' in 2016.
Zero shame in her game: Amy Schumer spurns critics over potential Barbie role
Amy Schumer is calling out critics who slammed her potential casting as Barbie in an upcoming live-action film based on the Mattel doll.
CBC MUSIC Making Noise: 10 artists who shaped conversations on music in 2016
From Gord Downie to A Tribe Called Red to Grimes, CBC Music examines 10 important Canadian artists who shaped the conversations we had around music over the past year.
more »

Technology & Science »

The weather outside is frightful thanks to climate change and the polar vortex video
With cold, blustering snowstorms battering the West Coast and the Prairies, you might be tempted to say "What global warming?" But climate change may, in fact, be to blame for this very Canadian winter.
Cassini sends back 1st images from new orbit around Saturn
From its new orbit, NASA's Cassini spacecraft has returned stunning close-up images of Saturn and a raging storm at its north pole.
Award-winning scientist says compromise needed on climate debate
The winner of a major scientific award for his work on Arctic glaciers and climate change says Canadians need to start talking and listening to each other on the problem of global warming.
more »

Money »

China showing signs of recovery in latest trade report
China's imports grew at the fastest pace in more than two years in November, fuelled by its strong thirst for commodities from coal to iron ore, while exports also rose unexpectedly, reflecting a pick-up in both domestic and global demand.
WestJet pilots union drive takes flight again
After laying the groundwork for a year, the Air Line Pilots Association has officially launched its drive to unionize WestJet's pilots, following a failed attempt by another association in 2015.
Moose Knuckles, Competition Bureau reach deal over made-in-Canada concerns
High-end winter jacket maker Moose Knuckles and the Competition Bureau have reached a deal over concerns about made-in-Canada claims in the company's advertising and labelling of some of its parkas.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Kylie Masse picks up Canada's 1st short-course silver medal video
Canada's Kylie Masse raced to a silver medal at the world short-course swimming championships on Wednesday.
Kylie Masse dives into swimming spotlight in hometown championship video
Kylie Masse grew up just 15 minutes away from world championship venue. CBC Sports reporter Devin Heroux talks to her family about how they are approaching the hometown tournament.
Coming Up World short-course swimming championships
Watch the morning heats Thursday at 9:30 a.m. ET as Penny Oleksiak, Katerine Savard and more Canadian swimming stars compete in the world short-course championships in Windsor, Ont.
more »

Diversions »

[an error occurred while processing this directive]
more »