Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-1765 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Photoshop

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

9.3CRITICALNVD

EPSS

38.3%

top 2.76%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Adobe Photoshop

Timeline

PublishedApr 23

Latest updateMay 1

Description

Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/photoshop3.2

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-mh3p-5xjf-xj56: Buffer overflow in Adobe Photoshop Album Starter Edition 3↗2022-05-01

▶

CVEList

CVE-2008-1765: Buffer overflow in Adobe Photoshop Album Starter Edition 3↗2008-04-23

▶

💥Exploits & PoCs

Exploit-DB

Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow↗2008-04-21

▶