Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Florida teens who recorded drowning and laughed could be charged
A group of Florida teenagers who recorded a man drowning on cellphones and laughed about it rather than calling for help could face charges, according the police chief in Cocoa, Fla.
Analysis Timing of Sean Spicer's exit allows him to go 'with the least egg on his face' video
He has been humiliated and mocked, and repeatedly frustrated and undercut by his own boss. But the hiring of a new White House communications director seems to have been the final straw for Sean Spicer, who announced on Friday he will abandon his post as Donald Trump's press secretary after a tumultuous six-month stint.
Ceasefire in effect in parts of Syria, but fighting intensifies on Lebanese border
The Syrian army command says it has ceased its military operations in several areas near the capital Damascus and in Idlib province, but Hezbollah and Syrian troops stepped up operations against rebels in parts of Syria near the Lebanese border.
more »

Canada »

Some residents headed home as B.C. evacuations orders are downgraded
For some wildfire evacuees, it's been more than two weeks since they left home. The 3,300-hectare wildfire that forced them out is now said to be 90 per cent contained.
Canadians set record with U.S. real estate shopping spree
The big spending comes despite the loonie's relative weakness compared to the greenback.
Indigenous Games leaves lasting impact on all who participated video
On the field, court, pitch or pool, there was no shortage of athletic triumphs as competitors from 22 teams battled for medals in 14 sports at the North American Indigenous Games. But for many, the event was more about the spirit of competition than reaching the podium.
more »

Politics »

Trudeau 'not working hard enough' on NAFTA file, says Scheer video
The leader of the Official Opposition is calling out Prime Minister Justin Trudeau's credentials handling the North American Trade Agreement file, less than a month before negotiations with the U.S. and Mexico get underway.
Illegal border crossings by asylum seekers decline in Manitoba but spike in Quebec
The total number of illegal border crossings made by asylum seekers increased slightly in June compared with the previous month but has stayed relatively consistent since March according to newly released government figures.
PC, Wildrose members decide today if there will be a United Conservative Party in Alberta
The question of whether Alberta conservatives will unite under a single party will be answered later Saturday when the results of the unity vote are revealed by the Wildrose and Progressive Conservative parties.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Home Alone, Sopranos actor John Heard dead at 72
John Heard, best known for his roles in Home Alone, Big, and Beaches, died Friday. He was 72.
90 hospitalized during Chance the Rapper show in Connecticut
Police in Connecticut say more than 90 people were hospitalized during a concert featuring Chance the Rapper.
Singer Scotty McCreery cited for loaded gun at airport
Country singer Scotty McCreery has been cited after authorities say he had a loaded handgun with him in Raleigh-Durham International Airport.
more »

Technology & Science »

Analysis Hyperloop technology will revolutionize transportation, but it has to get off the ground first
A hyperloop is a vacuum-sealed tube that would theoretically allow pods of humans to travel at speeds close to the speed of sound. It might sound like science fiction, but it's closer to reality than you might think.
Common genetic trait links human and doggy friendliness
Scientists studying the genetic basis for dog friendliness have found it comes from a portion of their genome that is similar to the area in the human genome that relates to sociability.
Video Couple catches slow, snaky death of rare Canadian salamander found only in Manitoba video
It was a sunny July day on the Prairies when Laura Reeves witnessed the slow death of a secretive amphibian in southeastern Manitoba that isn't found anywhere else in Canada.
more »

Money »

Canadians set record with U.S. real estate shopping spree
The big spending comes despite the loonie's relative weakness compared to the greenback.
Face your financial future now rather than hiding from your debt video
Trade your book club for a debt-destruction club, says personal-finance expert Bruce Sellery.
Muslim designers push forward modest fashion movement
Despite the recent arrest of a young Saudi woman wearing a miniskirt in a video that went viral, a growing number of Canadian fashion designers are looking to prove that fashion for Muslim women can be both modest and fun.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Live Road to the Olympic Games: FINA World Aquatics Championships video
Watch Road to the Olympic Games, our show spotlighting the best high-performance athletes from Canada and around the world. On Saturday's program, we feature coverage from the FINA World Aquatics Championships in Budapest, Hungary.
Coming Up FIVB Volleyball World Grand Prix: Canada vs. Peru video
Watch live on Saturday at 3:30 p.m. ET as the Canadian women's volleyball team takes on Peru at a FIVB Volleyball World Grand Prix event in Richmond, B.C.
Jennifer Abel ties Canadian diving record with mixed synchro bronze video
Canada's Jennifer Abel tied Alexandre Despatie's Canadian record with her eighth career medal at the world championships, earning bronze with François Imbeau-Dulac in the 3-metre event in Budapest, Hungary, on Saturday.
more »

Diversions »

[an error occurred while processing this directive]
more »