Lucene search

K
cveAdobeCVE-2010-1296
HistoryMay 27, 2010 - 7:30 p.m.

CVE-2010-1296

2010-05-2719:30:01
CWE-119
adobe
web.nvd.nist.gov
42
cve-2010-1296
adobe photoshop cs4
buffer overflows
remote code execution
security vulnerability
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.157

Percentile

96.0%

Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file.

Affected configurations

Nvd
Node
adobephotoshop_cs4Range11.0.1
OR
adobephotoshop_cs4Match11.0
VendorProductVersionCPE
adobephotoshop_cs4*cpe:2.3:a:adobe:photoshop_cs4:*:*:*:*:*:*:*:*
adobephotoshop_cs411.0cpe:2.3:a:adobe:photoshop_cs4:11.0:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.157

Percentile

96.0%