Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Here's what could happen if North Korea detonated a hydrogen bomb
If nuclear tensions between North Korea and the United States were to escalate beyond hurling test missiles and insults like 'madman' and 'dotard,' what would that look like? Experts share some of the ramifications to human health, the environment and technology.
Powerless Puerto Rico's storm crisis deepens with dam threatening to fail video
Puerto Rican officials have been unable communicate with more than half the towns in the U.S. territory as they rush to evacuate tens of thousands of people downstream of a failing dam, with a possible catastrophe imminent.
Updated Trump has made 'our rockets' visit' to U.S. mainland inevitable, North Korean foreign minister says video
North Korea's Foreign Minister Ri Yong Ho told the United Nations on Saturday that U.S. President Donald Trump had made "our rockets' visit to the entire U.S. mainland inevitable" by calling North Korean leader Kim Jong-un "rocket man."
more »

Canada »

Chief Canadian NAFTA negotiator not expecting progress on auto content rules
Despite tough talk from the U.S. about the job-killing impact of NAFTA on its automotive sector, Canada's chief negotiator isn't expecting to see a detailed American proposal on the matter during the latest round of talks to rewrite the continental trade pact.
'Full of energy and passion': Liberal MP Arnold Chan remembered as advocate for Canadians at funeral
Arnold Chan, the Liberal MP for Scarborough-Agincourt, was remembered by dignitaries and colleagues, including Prime Minister Justin Trudeau, at a church service in Toronto on Saturday.
Analysis 'Trump has scared the bejesus out of everyone': How Canada could win the Amazon sweepstakes
Amazon's picking Canada for its coveted second headquarters is more than just wishful thinking.
more »

Politics »

Chief Canadian NAFTA negotiator not expecting progress on auto content rules
Despite tough talk from the U.S. about the job-killing impact of NAFTA on its automotive sector, Canada's chief negotiator isn't expecting to see a detailed American proposal on the matter during the latest round of talks to rewrite the continental trade pact.
'Full of energy and passion': Liberal MP Arnold Chan remembered as advocate for Canadians at funeral
Arnold Chan, the Liberal MP for Scarborough-Agincourt, was remembered by dignitaries and colleagues, including Prime Minister Justin Trudeau, at a church service in Toronto on Saturday.
Analysis Senate looks for a way forward on expenses after years of scandal
Many senators who lived through the auditor general's recent review of expenses say the process cost too much and took too long — but the next step could be trying, too, as senators argue over the best way to keep an eye on expenses without racking up huge costs.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Meghan Markle's ex developing 'splitcom' with royal family ties: report
Meghan Markle, actress and girlfriend of Prince Harry, might have inspired a new sitcom being developed by her ex-husband.
Soul singer Charles Bradley dead at age 68
Soul singer Charles Bradley has died, according to a tweet from his official account. He was 68.
Shawn Mendes donates $100k to Mexican earthquake relief
Shawn Mendes has launched an online fundraiser to help those affected by the Mexican earthquake just days after he escaped safely from the quake ahead of a planned show in Mexico City, an incident he called "pretty scary."
more »

Technology & Science »

Here's what could happen if North Korea detonated a hydrogen bomb
If nuclear tensions between North Korea and the United States were to escalate beyond hurling test missiles and insults like 'madman' and 'dotard,' what would that look like? Experts share some of the ramifications to human health, the environment and technology.
Climate change scientists fight for funding to save High Arctic lab
Scientists say if they can't get more funding, they will have to pull the plug on Canada's northernmost research station in May of 2018.
New iPhones cost from $229 to $799 with a two-year contract
If you sign up for a contract, the iPhone 8 starts at $229 Cdn and the iPhone X at $599.
more »

Money »

Analysis 'Trump has scared the bejesus out of everyone': How Canada could win the Amazon sweepstakes
Amazon's picking Canada for its coveted second headquarters is more than just wishful thinking.
Q&A: How to avoid car dealerships pushing maintenance you don't need
Following a Marketplace investigation, host David Common and expert mechanic Mark Whinton participated in a Facebook Live, answering viewers' questions about their vehicles and what actually needs work when at the car dealership.
New iPhones cost from $229 to $799 with a two-year contract
If you sign up for a contract, the iPhone 8 starts at $229 Cdn and the iPhone X at $599.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Donald Trump, Warriors agree White House visit is off
The Golden State Warriors say they will not go to the White House when they visit Washington early next year, announcing the decision hours after President Donald Trump tweeted he was withdrawing the invitation.
Oakland's Maxwell 1st MLB player to kneel during national anthem
Bruce Maxwell of the Oakland Athletics has become the first major league baseball player to kneel during the national anthem.
Nadal, Federer team up for 1st doubles victory together at Laver Cup video
Rafael Nadal and Roger Federer joined forces to win the doubles in the new Laver Cup on Saturday. They teamed up for the first time to defeat Sam Querrey and Jack Sock 6-4, 1-6, 10-5 in the team event between Europe and the rest of the world.
more »

Diversions »

[an error occurred while processing this directive]
more »