cbcvebase.
CVE-2011-2131
published 2011-08-11

CVE-2011-2131: Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or cause a denial of…

PriorityP358critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
22.20%
97.7th percentile
Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GIF file.

Affected

4 ranges
VendorProductVersion rangeFixed in
adobecreative_suite——
adobecreative_suite——
adobephotoshop——
adobephotoshop——

Detection & IOCsextracted from sources · hover to see the quote

urlhttp://www.protekresearchlab.com/exploits/PRL-2011-08.gif↗
urlhttps://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17712.zip↗
  • →Trigger condition is a crafted GIF file with an invalid 'ushort ImageHeight' field value, causing memory corruption when opened in Adobe Photoshop CS5 (versions 12.0 / 12.1). Flag suspicious GIF files delivered to Photoshop users with malformed ImageHeight fields. ↗
  • →Exploitation requires user interaction — the target must open a malicious GIF file. Monitor for GIF files opened by Photoshop processes (e.g. Photoshop.exe loading .gif) originating from untrusted/remote sources. ↗
  • ·Affected versions are Adobe Photoshop 12.0 (CS5) and 12.1 (CS5.1) only. Detection and patching efforts should be scoped to these specific version strings. ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.