Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Updated 'We are going to be the last school shooting': Student survivors at Florida rally call for gun law changes video
Calls for gun control laws rang out at an emotionally charged rally in Florida today as the state legislature grapples with what to do in the aftermath of Wednesday's shooting at a Parkland high school.
U.S., Russia trade jibes following FBI election-meddling indictment
Top Russian and American officials exchange barbs in Germany over the U.S. indictment of 13 Russians accused of an elaborate plot to disrupt the 2016 presidential election.
Helicopter crash kills 13 after strong quake hits Mexico
At least 13 people on the ground, including three children, were killed when a Mexican military helicopter carrying top officials surveying damage from an earthquake crashed in a small town in the southern state of Oaxaca, authorities say.
more »

Canada »

Updated 'The time for timid is over': Jagmeet Singh targets inequality in convention remarks
Tackling inequality in all its forms was NDP federal leader Jagmeet Singh's central message as he addressed the national convention in Ottawa.
'We were innocent': How one survivor hopes to get justice for Duplessis Orphans
Marc Boudreau, now 62, is trying to take seven Catholic organizations, along with the federal and provincial governments, to court for the abuse he said he suffered as a child.
Closed-door meeting helps Canadian women's curling team get 1st Olympic win
After their shocking 0-3 start to the Olympics, Canadian skip Rachel Homan and her teammates went behind closed doors for a heart-to-heart, then looked like a new team in Saturday's much-needed 11-3 trouncing of the United States.
more »

Politics »

Updated 'The time for timid is over': Jagmeet Singh targets inequality in convention remarks
Tackling inequality in all its forms was NDP federal leader Jagmeet Singh's central message as he addressed the national convention in Ottawa.
Trudeau's India mission mixes global business with local politics
Two-way trade between Canada and India amounts to only about $8 billion annually — a number Prime Minister Justin Trudeau hopes to improve with an official visit that begins this weekend. He has multiple meetings planned with Indian CEOs and business leaders over the coming days.
Jagmeet Singh not picking sides in pipeline battle audio
Federal NDP Leader Jagmeet Singh is refusing to take sides in the British Columbia-Alberta pipeline, as his party holds a convention where environmental policy resolutions are set to take up a large amount of real estate.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

'I can watch it again and again': Black Panther evokes pride across Africa
Black Panther has burst onto the screen in Africa, handing a powerful response to the unfortunate remarks about the continent by President Donald Trump.
Vince Gill defends Grammys on female representation
Vince Gill defended the Recording Academy over the criticism that female artists were underrepresented at this year's Grammy Awards.
Stars to wear statement black at BAFTA awards
The red carpet will be a sea of black as the movement against sexual misconduct takes centre stage at the British Academy Film Awards.
more »

Technology & Science »

Bob McDonald's blog Are young people losing face time to screen time?
The evidence suggests that children are getting too much screen time - and it could be affecting them as adults.
Starman and his Tesla could crash into Earth or Venus ... eventually
Bad news, Elon: There's a chance your Tesla Roadster will come crashing down to Earth.
Borneo's orangutans at risk of extinction after population decreases by 148,500 in 16 years
Partly due to deforestation and the rise of industrial plantations, Borneo's orangutans are at risk of one day disappearing for good.
more »

Money »

Canadians take more money out of retirement savings to pay for expenses: survey
Canadians are withdrawing more money from their retirement savings to pay for short-term expenses despite the tax consequences, according to a new bank survey.
Canada won't be 'impulsive' responding to U.S. tax cuts, Morneau says
The Liberal government will not 'act in an impulsive way' in response to U.S. corporate tax cuts that economists say pose a threat to Canada's competitiveness, the federal finance minister said after a pre-budget meeting Friday.
PepsiCo shuts down Alberta Spitz sunflower seed factory
Thirty years after Spitz sunflower seeds first sprouted in Alberta, the last factory in the province is set to shut down.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Canada on record Olympic medal pace in Pyeongchang
At Saturday's midway point of the Winter Games, Canada is on track to break its record medal haul of 26, set in Vancouver 2010.
Preview Canada's women's hockey team firing on all cylinders heading into semifinal
If the Olympic Athletes from Russia are to have any chance of upsetting the Canadian women's hockey team, they'll have to find some way of slowing the Canucks' red-hot offence.
Closed-door meeting helps Rachel Homan's team get 1st Olympic win
After their shocking 0-3 start to the Olympics, Canadian skip Rachel Homan and her teammates went behind closed doors for a heart-to-heart, then looked like a new team in Saturday's much-needed 11-3 trouncing of the United States.
more »

Diversions »

[an error occurred while processing this directive]
more »