Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Picture this: Security flaw found in Photoshop

Security company Secunia has issued a warning about what it calls a "highly critical" security hole in Adobe's popular Photoshop software.

Secunia said it has confirmed that the exploit affects Adobe Photoshop CS2 and Photoshop Elements 5.x. It is still trying to determine if it affects Photoshop CS3.

Portable network graphics (PNG) is a file format for saving digital images. It was developed as an alternative to GIF files. PNG is supported by many of the latest web browsers and graphics programs.

The security hole in the Adobe software, which was unpatched as of Monday afternoon, becomes an issue if Photoshop is used to open an infected PNG file. Malicious code contained in the file can then launch a buffer overflow attack. In a nutshell, this means an infected PNG file could be set up to run programs that could give a hacker remote access to a computer.

According to Secunia, "The vulnerability is caused due to a boundary error within the PNG.8BI Photoshop Format Plugin when handling PNG files. This can be exploited to cause a stack-based buffer overflow via a specially crafted PNG file."

Until a patch is released, a good defence would be to avoid using the affected versions of Photoshop to open PNG files unless you know they're from a trusted source.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Mark Rushton

NOTE that the Secundia website indicates that this affects the Windows version. Macintosh remains the safe bet!

Posted May 10, 2007 05:18 PM

Bob

Toronto

Or, test out "The Gimp" (currently Version 2.2) and see if it meets your needs instead of Photoshop. It's free as in freedom and free as in free beer.

Gimp 2.4 should be out soon and will be much improved and from what I've read Gimp 2.6 (currently in the works) will knock your socks off!

Also the free software community is well known for fixing security flaws in hours versus weeks and months for proprietary software.

Posted May 12, 2007 11:17 AM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Andreas Lubitz, Germanwings co-pilot, was treated for suicidal tendencies video
German prosecutors say Andreas Lubitz, the co-pilot who crashed a Germanwings passenger plane in the French Alps, had received treatment for suicidal tendencies for several years before he became a pilot.
Updated Fort Meade firefight kills 1 after driver tries to ram gate to NSA video
Two men dressed as women smashed a stolen car into a police vehicle after they disobeyed commands at the closely guarded gates of the nation's spy agency on Monday, prompting police to open fire.
Photos Sphinx, Eiffel Tower among China's knock-off monuments
From the Sphinx to the Leaning Tower of Pisa to Easter Island's Moai statues, we take a look at 10 monumental knock-offs erected in China.
more »

Canada »

New Canada lags on greenhouse gas targets, critics charge
Canada has yet to submit its targets for reducing greenhouse gas emissions, missing a deadline set in advance of a United Nations climate conference scheduled for December.
Amazon tests delivery drones at a secret site in Canada — here's why
If your Amazon order gets delivered by a drone sometime in the near future, you'll know Canada helped make that happen. Here's why Amazon is testing its drones here rather than in the U.S.
Analysis Is Canada's ISIS mission ready for Syria's moral maze? video
Canada's new ISIS mission will take us into a war zone that all our normal allies, save for the U.S., are steering well clear of — the antagonist-rich tinderbox that is present-day Syria. Do we know what we are getting into, Brian Stewart asks.
more »

Politics »

Live ISIS mission: MPs voting on motion to support extension Monday night video
The House of Commons is voting on the Conservative government's proposal to extend its military campaign in Iraq for up to one year and authorize airstrikes in Syria.
Anti-terror Bill C-51 battle moves to Senate committee
As the House committee prepares to begin clause-by-clause review of the anti-terror bill, Public Safety Minister Steven Blaney and Justice Minister Peter MacKay spent nearly an hour and a half taking questions on the legislation at the Senate national security committee on Monday afternoon.
New Canada lags on greenhouse gas targets, critics charge
Canada has yet to submit its targets for reducing greenhouse gas emissions, missing a deadline set in advance of a United Nations climate conference scheduled for December.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Arcade Fire, Deadmau5 face backlash after supporting Jay Z's streaming service, Tidal
Arcade Fire and Deadmau5 are among the artists publicly throwing their support behind Jay Z's new streaming service, Tidal — and both received decidedly mixed reactions from fans.
Q&A Trevor Noah: 6 questions for the new Daily Show host
Comedy Central names Trevor Noah as Jon Stewart's replacement on The Daily Show, leaving many fans asking 'who'? The 31-year-old explains why he's different in a Q&A from Dubai.
Trevor Noah to replace Jon Stewart on The Daily Show video
Comedian Trevor Noah has been selected to replace Jon Stewart on the satirical news program, The Daily Show, Comedy Central announced Monday.
more »

Technology & Science »

Amazon tests delivery drones at a secret site in Canada — here's why
If your Amazon order gets delivered by a drone sometime in the near future, you'll know Canada helped make that happen. Here's why Amazon is testing its drones here rather than in the U.S.
Go Public Bell accused of 'ganging up' on resale buyers by blacklisting phones video
A Montreal father is taking on Canada’s largest telecom, after Bell blacklisted his teenager’s phone — not because it was reported stolen, but because the original buyer didn’t pay Bell for the device under contract.
New Canada lags on greenhouse gas targets, critics charge
Canada has yet to submit its targets for reducing greenhouse gas emissions, missing a deadline set in advance of a United Nations climate conference scheduled for December.
more »

Money »

Teck Resources denies report of merger deal with Chilean miner Antofagasta
Teck Resources Ltd. denied a report Monday that it has been in talks regarding a possible merger with Chilean copper miner Antofagasta.
John Baird to join Canadian Pacific Railway board of directors
John Baird continues to deepen his ties with corporate Canada. The former Conservative cabinet minister is among 13 nominees to the expanded board of directors at Canadian Pacific Railways, a position that pays at least $235,000 a year.
Ben Bernanke launches blog defending actions as Fed chief
In his first post as a new blogger for the Brookings Institution Monday, Bernanke struck back at critics who he said had charged the Bernanke Fed with, among other things, 'throwing seniors under the bus' by keeping rates too low for too long.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Boomerang Effect World men's curling championship: Italy knows all about 6-enders video
Italy scored a six-ender on Sunday morning, and then had the rare feat come back to haunt them on against the U.S., team Monday night at the world men's curling championship in Halifax.
Analysis 2015 Toronto Blue Jays: Team on the rise?
The Toronto Blue Jays' pre-season performance has been encouraging and the manager believes it’s a more talented group than recent years. We discuss some of the players, young and older, and their roles in our Blue Jays season preview.
Montreal needs new stadium: MLB commissioner
Major League Baseball's new commissioner Rob Manfred is clear on what Montreal needs to bring baseball back: the city needs a new stadium.
more »

Diversions »

[an error occurred while processing this directive]
more »