Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Analysis Hillary Clinton sets out to redefine image as presidential campaign swings into full gear video
During the four-day Democratic Party convention, Hillary Clinton, her husband Bill Clinton, U.S. President Barack Obama and many other speakers set out to redefine her and change her narrative as she tries to convince Americans that she is best suited for the presidency.
Hillary Clinton campaign says DNC data program they used was hacked
Democratic presidential nominee Hillary Clinton's campaign said on Friday that an analytics data program maintained by the Democratic National Committee and used by the campaign was accessed as part of a hack, but outside experts have found no evidence that its internal systems have been compromised.
PHOTOS Pope asks God to forgive 'so much cruelty' during Auschwitz visit
Seated on a bench near the gate to the Auschwitz death camp site in Poland, Pope Francis prayed in silence on Friday in tribute to the 1.5 million people, most of them Jews, killed there by Nazi occupiers during the Second World War.
more »

Canada »

​Canadian dressage judge investigated for alleged tampering with Rio team selection
A Canadian equestrian claims she was robbed of a chance to compete at the Olympics and blames what she calls the "malicious" and "unethical behaviour" of a Canadian dressage judge whose actions are now being investigated by the sport's governing body.
Updated Nuttall and Korody free after B.C. judge overturns terror convictions
John Nuttall and Amanda Korody are free after a B.C. Supreme Court judge entered a stay of proceedings, ruling that the they were entrapped by the RCMP.
Husky oil spill: pipeline project in area didn't trigger review, Environment Minister says
A Husky Energy pipeline expansion that's in the same area as last week's big oil spill didn't require an environmental assessment because it didn't meet the required criteria, Saskatchewan Environment Minister Herb Cox says.
more »

Politics »

Analysis Clinton, Trump and trade: The curious case of the Democrat attack dogs that didn't bark
Speaker after speaker at the Democratic convention condemned Donald Trump — but not even Bill Clinton, who fathered NAFTA, found fault with Trump's pledge to rip it up. Ditto, Hillary Clinton. This doesn't bode well for Canada.
Analysis At Democratic and Republican conventions, Americans revel in oratory video
These last two weeks of televised conventions in the United States have been about the act of oratory. In such moments, it is tempting to envy American democracy.
Missing, murdered Indigenous women inquiry launch coming next week
The launch of a national inquiry into missing and murdered Indigenous women and girls will be announced by the federal government on Wednesday, CBC News has learned
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

MOVIE REVIEW Jason Bourne brings the blahs with plodding script and daddy issues video
Matt Damon's most successful character Jason Bourne returns in a new movie that has CBC's Eli Glasner asking him why he bothered.
Conservatives disappointed Bradley Cooper is a Democrat
Bradley Cooper's appearance at the Democratic National Convention has irked some conservative fans of the actor's portrayal of Navy SEAL Chris Kyle in 2014's American Sniper.
Ken Barrie, voice of Postman Pat, dead at 83
Ken Barrie, who provided the voice of affable animated letter-carrier Postman Pat, has died. He was 83.
more »

Technology & Science »

White dwarf star blasts its red giant companion with powerful radiation beam
Astronomers have discovered a new and unusual type of binary star lurking in our corner of the universe: one where a tiny white dwarf appears to blast its companion star with a beam of electrons every two minutes.
Zoo elephant throws stone at visitors, killing girl, 7
Experts at a zoo in the Moroccan capital of Rabat are trying to understand why an elephant hurled a stone toward visitors, killing a 7-year-old girl.
Pokemon Go creators working to remove unwanted Pokestops, gyms
The creators of Pokemon Go say they're working to remove real-world locations that don't wish to be included in the mobile gaming sensation.
more »

Money »

B.C. taxes foreign home buyers and gold's lustrous climb : BUSINESS WEEK WRAP
From the introduction of B.C. new foreign home-buyer tax to new research on the benefits of higher education, it was a busy week in business news. The CBC's Jacqueline Hansen sorts out the details in her weekly video recap.
NewLeaf sues consumer advocate Gabor Lukacs, alleging defamation
Discount flight company NewLeaf Travel is suing air passenger advocate Gabor Lukacs, accusing him of defamation through what it calls an "unrelenting, aggressive and malicious attack" on social media.
Ottawa posts small $114M surplus to start fiscal year
Ottawa posted a small surplus of $114 million in April and May combined, the Department of Finance said Friday.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Player's Own Voice Quest for Olympic medal takes cyclist on historic road
Canadian cyclist Georgia Simmerling isn't motivated by stats or numbers. So when the Vancouver native is asked how she feels about becoming the first Canadian woman to compete in three different sports at the Olympics, she doesn't have a answer. Only that a medal won't define her career.
New Rogers Cup serves Eugenie Bouchard some painful lessons
Pressure and expectations brought out the best and worst of Canada's Eugenie Bouchard at the women's Rogers Cup.
PGA Championship: Streb shoots 63 to grab share of lead with Walker
Robert Streb became the latest player to shoot 63 in a major, and hardly anyone noticed in a PGA Championship with endless action across Baltusrol on Friday.
more »

Diversions »

[an error occurred while processing this directive]
more »