KLA10698 Code execution vulnerability in Google Picasa

Buffer overflow was found in Google Picasa. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely.

Technical details

This vulnerability caused by heap based buffer overflow and triggered via vectors related to phase one 0x412 tag.

Original advisories

CVE list

CVE-2015-8096 critical

Solution

Update to the latest version

Get Picasa

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Google Picasa versions 3.9.140.239 and 3.9.140.248