Adobe Photoshop is prone to an overflow condition. The U3D.8bi plugin fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted Collada (.dae) asset element, a context-dependent attacker can potentially execute arbitrary.
Classification
Location:
Local / Remote,
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Coordinated Disclosure
Solution
Upgrade to version CS6 or higher, as the researcher has reported that they were unable to reproduce the vulnerability on CS6, despite the vendor not mentioning it in changelogs.. An upgrade is required as there are no known workarounds.
