CVE-2011-2443
Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
-Decision
Descriptions
Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted (1) .grd or (2) .abr file, a related issue to CVE-2010-1296.
Múltiples desbordamientos de búfer en Adobe Photoshop Elements v8.0 y anteriores permite a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída de la aplicación) o posiblemente ejecutar código arbitrario a través de un fichero modificado (1) .grd o (2) .abr archivo, un tema relacionado con CVE-2010-1296.
Adobe Photoshop Elements 8 suffers from a buffer overflow vulnerability when dealing with .ABR (brushes) and .GRD (gradients) format files. The application fails to sanitize the user input resulting in a memory corruption, overwriting several memory registers which can aid the attacker to gain the power of executing arbitrary code on the affected system or denial of service scenario.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-06-06 CVE Reserved
- 2011-10-01 CVE Published
- 2011-10-02 First Exploit
- 2024-07-13 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://securityreason.com/securityalert/8410 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/17918 | 2011-10-02 | |
| http://www.exploit-db.com/exploits/17918 | 2024-08-06 | |
| http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5049.php | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.adobe.com/support/security/advisories/apsa11-03.html | 2012-02-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Adobe Search vendor "Adobe" | Photoshop Elements Search vendor "Adobe" for product "Photoshop Elements" | <= 8.0 Search vendor "Adobe" for product "Photoshop Elements" and version " <= 8.0" | - |
Affected
| ||||||
| Adobe Search vendor "Adobe" | Photoshop Elements Search vendor "Adobe" for product "Photoshop Elements" | 5.0 Search vendor "Adobe" for product "Photoshop Elements" and version "5.0" | - |
Affected
| ||||||
| Adobe Search vendor "Adobe" | Photoshop Elements Search vendor "Adobe" for product "Photoshop Elements" | 7.0 Search vendor "Adobe" for product "Photoshop Elements" and version "7.0" | - |
Affected
| ||||||