CVE-2012-2027

Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a…

published May 9, 2012

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

⚡ A crafty TIFF file can cause Adobe Photoshop CS5 to trip over its own feet, leading to a use-after-free vulnerability that could let attackers run wild! 🎨 Think of it like a hotel that forgets to check if a room has been vacated before handing out the key to the next guest — chaos ensues when someone walks in unexpectedly! This vulnerability could allow an attacker to execute arbitrary code on your system, potentially leading to data theft, system compromise, or other malicious activities. It’s an open door for trouble, especially if you open a booby-trapped image in your creative workspace!

Put simply

Think of it like a hotel that forgets to check if a room has been vacated before handing out the key to the next guest — chaos ensues when someone walks in unexpectedly! The use-after-free vulnerability in Adobe Photoshop occurs when the application does not properly manage memory, allowing an attacker to exploit this flaw via a specially crafted TIFF file, executing arbitrary code remotely.

What to do

This vulnerability could allow an attacker to execute arbitrary code on your system, potentially leading to data theft, system compromise, or other malicious activities. It’s an open door for trouble, especially if you open a booby-trapped image in your creative workspace! To protect yourself, update Adobe Photoshop to version 12.0.5 or 12.1.1 or later immediately. Additionally, avoid opening TIFF files from untrusted sources to minimize risk. You've got this! Stay vigilant and keep your software updated to keep those nasty attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13290 · 96.4th percentile
Published
2012-05-09T01:00Z
EPSS history
Timeline
  • 09 MAY 01:00Z
    Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a…
    cvelistv5