CVE-2012-2052: Buffer Overflow

Published Jun 19, 2014

Updated

Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the contributor comments element.

Affected Software

6 affected components

Adobe Photoshop CS5=12.0

Adobe Photoshop CS5=12.0.1

Adobe Photoshop CS5=12.0.2

Adobe Photoshop CS5=12.0.3

Adobe Photoshop CS5=12.0.4

Adobe Photoshop Cs5.1=12.1

Event History

Jun 19, 2014

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2052?

CVE-2012-2052 is rated as high severity due to its potential to allow remote code execution.

How do I fix CVE-2012-2052?

To fix CVE-2012-2052, update Adobe Photoshop CS5 to version 12.0.5 or later, or upgrade to CS5.1 version 12.1.1 or later.

What platforms are affected by CVE-2012-2052?

CVE-2012-2052 affects Adobe Photoshop CS5 and CS5.1 on all platforms where these versions are installed.

Can CVE-2012-2052 be exploited remotely?

Yes, CVE-2012-2052 can be exploited remotely through specially crafted DAE files.

What type of vulnerability is CVE-2012-2052?

CVE-2012-2052 is a stack-based buffer overflow vulnerability.