Photoshop CS4 is prone to an overflow condition. The application fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted ABR file, a context-dependent attacker can potentially cause arbitrary code execution.

Upgrade to version 11.0.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1024042
• Exploit Database: 12751 12752 12753
• CVE ID: 2010-1296 (see also: NVD)
• Secunia Advisory ID: 39934
• Bugtraq ID: 40389
• ISS X-Force ID: 58888
• Other Advisory URL: http://securityreason.com/exploitalert/8291
  http://www.juniper.net/security/auto/vulnerabilities/vuln40389.html
  http://www.nsfocus.net/vulndb/15112
  http://www.securelist.com/en/advisories/39934
  http://www.securitylab.ru/vulnerability/394298.php
  http://www.zeroscience.mk/codes/psbrush_bof.txt
  http://www.zeroscience.mk/codes/psgradient_bof.txt
  http://www.zeroscience.mk/codes/psstyle_bof.txt
  http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4938.php
  http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php
  http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4940.php
  https://mysonicwall.com/sonicalert/searchresults.aspx?ev=article&id=237
  https://www.cert.be/pro/advisory/adobe-photoshop-cs4-multiple-vulnerabilities
• Vendor Specific Advisory URL: http://www.adobe.com/support/security/bulletins/apsb10-13.html
• Vendor Specific News/Changelog Entry: http://www.adobe.com/support/security/bulletins/apsb10-13.html
• Packet Storm: http://www.packetstormsecurity.org/filedesc/psbrush-overflow.txt.html
  http://www.packetstormsecurity.org/filedesc/psgradient-overflow.txt.html
  http://www.packetstormsecurity.org/filedesc/psstyle-overflow.txt.html
• VUPEN Advisory: VUPEN/ADV-2010-1252

• Gjoko Krstic - Zero Science Lab