Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Analysis From dreaded possibility to looming eventuality — Brexit is here: Nahlah Ayed
As official notice of Brexit is given, the feared consequences are already being felt: some EU workers affected aren't waiting to find out what happens, and are moving on. Some have stopped coming to Britain. Both trends have started causing problems for employers, Nahlah Ayed reports.
Special Report A country without cash: Zimbabwe is so desperate it's selling off its elephants
After nearly 40 years of Robert Mugabe’s rule, Zimbabwe is broke — so broke that it’s selling its elephants. CBC News explores the dying days of a dictatorship that continues to punish its people.
'The house literally collapsed on us': Mosul airstrikes that killed hundreds of civilians condemned video
The United Nations and Amnesty International are sounding the alarm over the rising number of Mosul residents killed by coalition and Iraqi forces as the battle to free Iraq's second largest city continues.
more »

Canada »

Updated Quebec budget 2017: Trains, cash for education, tax cuts for austerity-weary Quebecers video
Quebecers will see a bit more money in their pocketbooks thanks to the 2017 Quebec budget. But will the tax relief make up for the pain for the austerity years?
Conservative senators come to Lynn Beyak's defence while others say 'shame'
Conservative senators came to the defence of their colleague Lynn Beyak Tuesday, saying she has a right to free speech and should remain a member of the Red Chamber's Aboriginal Peoples committee
Students should not endure 'unacceptable discrimination' at border, parent tells TDSB
A Toronto parent is calling on the Toronto District School Board to cancel all previously planned trips to the United States this year due to concerns about restrictions at the border.
more »

Politics »

New Irving concerned 'speed of decision-making' in Ottawa will add to shipbuilding gap
Federal officials have been discussing a proposal to build up to two additional light icebreakers for the Canadian Coast Guard at Halifax's Irving Shipyard, CBC News has learned. The plan would allow work to continue at the site while Ottawa finalizes its delayed navy frigate replacement program.
Conservative senators come to Lynn Beyak's defence while others say 'shame'
Conservative senators came to the defence of their colleague Lynn Beyak Tuesday, saying she has a right to free speech and should remain a member of the Red Chamber's Aboriginal Peoples committee
Canadian officials in Brussels to discuss US, UK electronics ban on some flights
Transport Minister Marc Garneau confirms officials from his department are in Brussels to discuss in flight electronics bans brought in by the U.S. and U.K. Canada has still not decided whether to take similar precautions.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Family files lawsuit in Canadian filmmaker's Florida Keys dive death
The family of a Canadian filmmaker and conservationist who died during a shark filming excursion in the Florida Keys has filed a wrongful death lawsuit.
Drake's More Life smashes records, including his own
He started from the bottom, but now Drake's sitting atop the music charts again. More Life, the Toronto rapper's latest release, is officially a record-breaker.
Bill Cosby's lawyers ask to exclude testimony on other women, pills
Bill Cosby's lawyers don't want jurors at his suburban Philadelphia sexual-assault trial to hear he gave women quaaludes, money or educational funds.
more »

Technology & Science »

Supermassive black holes give birth to stars, astronomers discover
A team of astrophysicists has discovered that supermassive black holes at the centre of galaxies aren't just destroyers of stars, but also their creators.
2 Canadians win Gairdner Awards for contributions to medical science
Two Canadian researchers are among the winners of this year's Gairdner Awards, which recognize some of the most significant medical discoveries made by scientists around the globe.
Trump issues executive order rolling back Obama climate change policies
U.S. President Donald Trump signed an executive order on Tuesday to undo Obama-era climate change regulations that his administration says are hobbling oil drillers and coal miners, a move environmental groups have vowed to take to court.
more »

Money »

Home Capital shares dive after company terminates CEO
Shares of Home Capital Group Inc. lost almost 10 per cent on the TSX on Tuesday, a day after the company said it had terminated its top executive.
Purolator stops accepting new parcels as threat of strike looms
Package delivery firm Purolator suspended acceptance of new shipments Tuesday after its largest union issued 72 hours' notice of a possible strike, which would commence Wednesday at 4:30 p.m. ET.
'I welcome a dust-off' of NAFTA, says Bank of Canada's Stephen Poloz
Bank of Canada governor Stephen Poloz says there could be room to improve the North American Free Trade Agreement.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Meagan Duhamel: Sometimes you can't put a finger on what's wrong
Despite being a two-time defending world pairs champion with partner Eric Radford, Meagan Duhamel has endured a frustrating season. In her first-person account to CBC Sports, Duhamel delves into the real issues behind her roller-coaster year.
Live Blog World Figure Skating Championships
Follow the action in real time with live dispatches from CBC Sports' Pj Kwong, Scott Russell and Brenda Irving in Helsinki, Finland.
For Mark McMorris, risk of backcountry snowboarding is part of the sport video
Despite the dangers involved, for many of the world's best snowboarders a ride in the backcountry is a return to the sport's roots — and an essential part of their lives.
more »

Diversions »

[an error occurred while processing this directive]
more »