ID CVE-2012-2027
Summary Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.
References
Vulnerable Configurations
  • cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:2.5:*:pro:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:2.5:*:pro:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:3.0:*:pro:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:3.0:*:pro:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:4.0:*:pro:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:4.0:*:pro:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:5.0:*:pro:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:5.0:*:pro:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:6.0:*:pro:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:6.0:*:pro:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:9.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:9.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:10.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:10.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:11.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:11.0:*:*:*:*:*:x64:*
    cpe:2.3:a:adobe:photoshop:11.0:*:*:*:*:*:x64:*
  • cpe:2.3:a:adobe:photoshop:11.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:11.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:11.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:11.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:11.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:11.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:12.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:12.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:12.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:12.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:12.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:12.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:12.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:12.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop:12.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop:12.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop_cs4:11.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop_cs4:11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:photoshop_cs5.5:*:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:photoshop_cs5.5:*:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 21-06-2014 - 04:17)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 52634
confirm http://www.adobe.com/support/security/bulletins/apsb12-11.html
Last major update 21-06-2014 - 04:17
Published 09-05-2012 - 04:36
Last modified 21-06-2014 - 04:17
Back to Top