CVE-2012-2027

Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.adobe.com/support/security/bulletins/apsb12-11.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/52634

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:photoshop::::::::
	cpe:2.3:a:adobe:photoshop:2.5::pro:::::
	cpe:2.3:a:adobe:photoshop:3.0::pro:::::
	cpe:2.3:a:adobe:photoshop:4.0::pro:::::
	cpe:2.3:a:adobe:photoshop:5.0::pro:::::
	cpe:2.3:a:adobe:photoshop:6.0:::::::*
	cpe:2.3:a:adobe:photoshop:6.0::pro:::::
	cpe:2.3:a:adobe:photoshop:6.0.1:::::::*
	cpe:2.3:a:adobe:photoshop:7.0:::::::*
	cpe:2.3:a:adobe:photoshop:7.0.1:::::::*
	cpe:2.3:a:adobe:photoshop:8.0:::::::*
	cpe:2.3:a:adobe:photoshop:9.0:::::::*
	cpe:2.3:a:adobe:photoshop:9.0.1:::::::*
	cpe:2.3:a:adobe:photoshop:9.0.2:::::::*
	cpe:2.3:a:adobe:photoshop:10.0:::::::*
	cpe:2.3:a:adobe:photoshop:10.0.1:::::::*
	cpe:2.3:a:adobe:photoshop:11.0:::::::*
	cpe:2.3:a:adobe:photoshop:11.0::::::x64:
	cpe:2.3:a:adobe:photoshop:11.0.1:::::::*
	cpe:2.3:a:adobe:photoshop:11.0.2:::::::*
	cpe:2.3:a:adobe:photoshop:11.0.4:::::::*
	cpe:2.3:a:adobe:photoshop:12.0.0:::::::*
	cpe:2.3:a:adobe:photoshop:12.0.1:::::::*
	cpe:2.3:a:adobe:photoshop:12.0.2:::::::*
	cpe:2.3:a:adobe:photoshop:12.0.3:::::::*
	cpe:2.3:a:adobe:photoshop:12.0.4:::::::*
	cpe:2.3:a:adobe:photoshop_cs4:11.0:::::::*
	cpe:2.3:a:adobe:photoshop_cs5.5::::::::

History

No history.

Information

Published : 2012-05-09 04:36

Updated : 2014-06-21 04:17

NVD link : CVE-2012-2027

Mitre link : CVE-2012-2027

CVE.ORG link : CVE-2012-2027

JSON object : View

Products Affected

adobe

photoshop_cs4
photoshop
photoshop_cs5.5

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2012-2027", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-05-09T04:36:41.167", "references": [{"url": "http://www.adobe.com/support/security/bulletins/apsb12-11.html", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@adobe.com"}, {"url": "http://www.securityfocus.com/bid/52634", "source": "psirt@adobe.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file."}, {"lang": "es", "value": "Una vulnerabilidad de uso de memoria previamente liberada en Photoshop CS5 versiones 12.x anteriores a 12.0.5 y CS5.1 versiones 12.1.x anteriores a 12.1.1 de Adobe, permite a los atacantes remotos ejecutar c\u00f3digo arbitrario por medio de un TIFF dise\u00f1ada (tambi\u00e9n se conoce como .TIF)."}], "lastModified": "2014-06-21T04:17:07.790", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21D8D192-7845-4011-860F-807DC0B452EB"}, {"criteria": "cpe:2.3:a:adobe:photoshop:2.5:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE856BFD-E363-45BF-A5AA-CCC468836DE0"}, {"criteria": "cpe:2.3:a:adobe:photoshop:3.0:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49A18D73-EE59-4782-8736-D70970DB610F"}, {"criteria": "cpe:2.3:a:adobe:photoshop:4.0:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9976B659-1F52-4738-B373-8DE92DBEF6F0"}, {"criteria": "cpe:2.3:a:adobe:photoshop:5.0:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AACBCAC-74F1-4D8C-89CF-C1612527C70B"}, {"criteria": "cpe:2.3:a:adobe:photoshop:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "681925AA-C8C8-4C84-B56E-4D4577E9B5A8"}, {"criteria": "cpe:2.3:a:adobe:photoshop:6.0:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98D707B3-8683-418E-9F2B-40C087FCCAEA"}, {"criteria": "cpe:2.3:a:adobe:photoshop:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4398C0A1-52F9-4CD5-8B01-10500C01249C"}, {"criteria": "cpe:2.3:a:adobe:photoshop:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD03FB10-858D-4B2B-B86A-46AEBF7DA63E"}, {"criteria": "cpe:2.3:a:adobe:photoshop:7.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C81811B5-2DA7-4AED-99ED-A1353335CA83"}, {"criteria": "cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0820E48-12AD-4112-BC83-D81045D64AA4"}, {"criteria": "cpe:2.3:a:adobe:photoshop:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5A76E3B-AE7E-4ED7-8851-02B216E6343F"}, {"criteria": "cpe:2.3:a:adobe:photoshop:9.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9467F309-26D5-4C19-AE2B-B25FAD595009"}, {"criteria": "cpe:2.3:a:adobe:photoshop:9.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F1D2452-C141-4A9E-ACA9-61A44FB63302"}, {"criteria": "cpe:2.3:a:adobe:photoshop:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F39A3626-CD9D-42C9-8767-64BE9ED19E73"}, {"criteria": "cpe:2.3:a:adobe:photoshop:10.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEB26222-A027-44F3-B58B-2B323455AA61"}, {"criteria": "cpe:2.3:a:adobe:photoshop:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B90F7CB6-B672-4FDD-B395-06CB6C18AD66"}, {"criteria": "cpe:2.3:a:adobe:photoshop:11.0:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "7DEFC1FF-B3EC-41B1-BB4E-763D8830BF4D"}, {"criteria": "cpe:2.3:a:adobe:photoshop:11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CA1D1CC-E213-4023-94A8-F2434F06B72E"}, {"criteria": "cpe:2.3:a:adobe:photoshop:11.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB9D7070-A514-4B0A-A288-84E4A613B659"}, {"criteria": "cpe:2.3:a:adobe:photoshop:11.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28AE39ED-2EB1-4863-B19A-59FACB411D49"}, {"criteria": "cpe:2.3:a:adobe:photoshop:12.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59C85C42-EBA3-4589-BDBE-A41319214C29"}, {"criteria": "cpe:2.3:a:adobe:photoshop:12.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8507E525-C3A9-414C-BD08-A237AF070355"}, {"criteria": "cpe:2.3:a:adobe:photoshop:12.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2C82FB8-9E4D-4349-BC44-E0CBFF6B307E"}, {"criteria": "cpe:2.3:a:adobe:photoshop:12.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8990C4A-0691-4491-8AEC-31380F3990F4"}, {"criteria": "cpe:2.3:a:adobe:photoshop:12.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "921965E7-FF3C-443D-9DA4-CBFC6089767A"}, {"criteria": "cpe:2.3:a:adobe:photoshop_cs4:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75F5536F-4E8B-4352-B2C7-2F4C46C8C276"}, {"criteria": "cpe:2.3:a:adobe:photoshop_cs5.5:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F987B419-82C1-4F57-AFB9-5330473E20D9", "versionEndIncluding": "12.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@adobe.com"}