Adobe Photoshop is prone to an overflow condition. The Standard MultiPlugin.8BF module fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted tRNS chunk in a PNG image file, a context-dependent attacker can potentially execute arbitrary code.

Upgrade to version CS6 13.0.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1027477
• CVE ID: 2012-4170 (see also: NVD)
• Exploit Database: 20971
• Secunia Advisory ID: 49141
• Vendor Specific Advisory URL: http://www.adobe.com/support/security/bulletins/apsb12-20.html
• Other Advisory URL: http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=60&Itemid=60

• Francis Provencher - via Secunia