CVE-2008-1765 – Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow

https://notcve.org/view.php?id=CVE-2008-1765

Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244. Desbordamiento de búfer en Adobe Photoshop Album Starter Edition 3.2, y posiblemente en After Effects CS3, permite a atacantes remotos con usuario asistido, y atacantes físicamente próximos ejecutar código arbitrario a través de un fichero BMP con una cabecera de imagen no válida. NOTE: El problema relacionado con Photoshop CS3 ya está tratado en CVE 2007-2244. • https://www.exploit-db.com/exploits/5479 http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html http://secunia.com/advisories/29838 http://securitytracker.com/id?1019910 http://www.adobe.com/support/security/advisories/apsa08-04.html http://www.securityfocus.com/bid/28874 http://www.vupen.com/english/advisories/2008/1317 https://exchange.xforce.ibmcloud.com/vulnerabilities/41941 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •