CVE-2012-2027

published 2012-05-09

CVE-2012-2027: Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a…

Priority P3 58 critical 9.3 CVSS 2.0

AV N AC M Au N C C I C A C

EXPLOIT

Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.

Affected

25 ranges

Vendor	Product	Version range	Fixed in
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop	—	—
adobe	photoshop_cs4	—	—
adobe	photoshop_cs5.5	<= 12.0	—

Detection & IOCs extracted from sources · hover to see the quote

url http://www.protekresearchlab.com/exploits/PRL-2012-07.tif↗

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19338.tif↗

filename PRL-2012-07.tif↗

filename 19338.tif↗

• → Monitor Adobe Photoshop CS5 (versions 12.x before 12.0.5 and 12.1.x before 12.1.1) opening crafted TIFF (.tif/.tiff) files, which trigger a use-after-free during TIFF parsing and may lead to arbitrary code execution. ↗
• → Flag delivery of .tif/.tiff files to users running vulnerable Adobe Photoshop versions (CS5 12.x < 12.0.5, CS5.1 12.1.x < 12.1.1) via email, web, or file shares as a potential exploitation vector. ↗

• · Exploit targets Windows platform specifically; Linux (via Wine) and macOS exposure may differ. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-399