CVE-2007-2365

Published: Apr 30, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

Affected (4)

Products: Adobe: Golive, Illustrator, Photoshop, Photoshop Elements

4 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Adobe Golive	Version 9
Adobe Illustrator	Version cs3
Adobe Photoshop	Version 9.0.2
Adobe Photoshop Elements	Version 5.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://osvdb.org/35465

Source: cve@mitre.org

http://osvdb.org/38063

Source: cve@mitre.org

http://secunia.com/advisories/25044

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26846

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26864

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1018792

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb07-13.html

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb07-16.html

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb07-17.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/23698

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1577

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3442

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3443

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33956

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3812

Source: cve@mitre.org

http://osvdb.org/35465