Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

U.S. federal appeals court blocks Trump's revised travel ban
A U.S. federal appeals court dealt another blow to President Donald Trump's revised travel ban targeting six Muslim-majority countries on Thursday, siding with groups that say the policy illegally targets Muslims. The White House says it remains confident its order is legal.
CBC IN SOUTH SUDAN How the world's youngest country went from dreams to despair
South Sudan is not even six years old but is mired in conflict and facing serious food shortages, driving some to lose hope and abandon the country they brought into being. A special report by CBC's Margaret Evans.
Greece's former PM among wounded in Athens car bomb explosion
An explosion inside a car in Greece's capital wounded former prime minister Lucas Papademos on Thursday, police said. His injuries were not considered to be life-threatening.
more »

Canada »

Montrealer fighting for her life after Times Square crash
Montrealer Elena Avetisian is still in critical condition in a New York City hospital after she was struck by a motorist who drove his car into the Times Square crowd.
Annual G7 meeting coming to Quebec next year
Canada will play host to next year's meeting of G7 leaders at a remote luxury resort in the Charlevoix region of Quebec, The Canadian Press has learned.
2 guilty pleas in crash that killed RCMP Const. Sarah Beckett
Kenneth Fenton has pleaded guilty to two criminal counts in the death of RCMP Const. Sarah Beckett.
more »

Politics »

Analysis Trudeau suggests defence review will invest more in troops than weaponry video
Prime Minister Justin Trudeau, facing demands that Canada invest more in its military, says caring for troops is the priority in the upcoming defence policy. His comments in Brussels raise questions about the focus of the Liberal government's long-awaited statement.
New trial ordered in sex assault case after Ontario judge refuses to explain her verdict
Canada's judicial watchdog is initiating a complaint against Ontario Superior Court Justice Susanne Goodman after the province's court of appeal issued a blistering ruling that calls into question her very abilities as a judge.
Midweek podcast: Who will lead British Columbia? audio
On The House midweek podcast, the final results are in and we still don't know who will end up in charge in British Columbia. The Green Party holds the balance of power and could decide to help the Liberals or the NDP form a minority government. We speak to leader Andrew Weaver. We also talk to former chief Bill Wilson about why he added his voice to the growing chorus of critics of the national inquiry into missing and murdered indigenous women and girls.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Video How Star Wars ruined Hollywood video
Forty years ago today, director George Lucas unleashed his dream about a fantastic universe filled with brave warriors, devoted robots and exhilarating space battles. But the success of the epic series has come at a creative cost for the movie industry.
Is nostalgia enough to make Ultra Street Fighter 2 a success?
Ultra Street Fighter 2 brings back one of the most popular games of all time on Nintendo's Switch. But does this remastered version justify its $50 asking price?
'I'll never be sorry': Dirty Dancing remake viewers might disagree
ABC entered the musical adaptation game with a leap on Wednesday night, but its Dirty Dancing remake landed with a thud with many viewers and critics.
more »

Technology & Science »

NASA'S Juno spacecraft finds chaotic weather, massive cyclones over Jupiter's poles
Once it began skimming Jupiter's cloud tops last year, NASA's Juno spacecraft spotted chaotic weather, including enormous cyclones over the planet's poles, according to new research.
Q&A New research reveals what happens when adults learn to read
New research found that brain regions associated with ancient functions are largely responsible for our ability to read.
Russian spies may have backed email phishing campaign in effort to spread disinformation
New evidence of a global espionage campaign involving email phishing attacks and leaked falsified documents emerged on Thursday, with clues suggesting the Russian government might have been involved.
more »

Money »

GM accused of installing 'defeat devices' in diesel trucks to beat emissions tests
GM says it plans to defend itself against "baseless" allegations.
Canadians hoarding $16B worth of unused loyalty points
We all love free stuff so it’s no surprise that Canadians are pledging allegiance to multiple loyalty programs. However, many of us are not bothering to cash in on our rewards.
Analysis Trump's 1st budget could worsen distortions as economy cools and assets soar: Don Pittis
As inflation and the economy stagnate, house prices and stocks are hitting new highs. The danger is that Donald Trump's first budget means more of the same for North America.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Recap Heartbreak for Senators as Penguins win in 2OT to advance to Stanley Cup
Pittsburgh's Chris Kunitz scored in the second overtime period, bringing the Ottawa Senators' storybook spring to an end after a 3-2 loss to the Penguins Thursday in Game 7 of the Eastern Conference final.
Preview Andre De Grasse has unfinished business at Prefontaine Classic
Andre De Grasse is scheduled to run the men's 100 metres at the Prefontaine Classic in Oregon on Saturday (CBC, CBCSports.ca, 5:24 p.m. ET) , where the Canadian sprinter finished last in his Diamond League season debut a year ago.
Canada 150 Harry Jerome: Race against time video
He owned a share of the 100-metre world record while still a teenager and went on to win an Olympic medal, but Canadian sprinting legend Harry Jerome struggled to outrun the prejudice of his day.
more »

Diversions »

[an error occurred while processing this directive]
more »