CVE-2012-0275 describes a critical heap-based buffer overflow vulnerability in Adobe Photoshop CS5, CS5.1, and CS6. This flaw allows remote attackers to execute arbitrary code on a vulnerable system by tricking a user into opening a specially crafted TIFF image utilizing SGI24LogLum compression. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication and having low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability garnered significant media attention and community discussion at the time of its disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.0.1CPE matchmatch criteria | cpe:2.3:a:adobe:photoshop_cs5.5:12.0.1:*:*:*:*:*:*:* | ||
12.0.2CPE matchmatch criteria | cpe:2.3:a:adobe:photoshop_cs5.5:12.0.2:*:*:*:*:*:*:* | ||
12.0.3CPE matchmatch criteria | cpe:2.3:a:adobe:photoshop_cs5.5:12.0.3:*:*:*:*:*:*:* | ||
12.0.4CPE matchmatch criteria | cpe:2.3:a:adobe:photoshop_cs5.5:12.0.4:*:*:*:*:*:*:* | ||
12.1CPE matchmatch criteria | cpe:2.3:a:adobe:photoshop_cs5.5:12.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.