KLA10702 Code execution vulnerability in Google Picasa

Integer overflow was found in Google Picasa. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed CAMF section in FOVb image.

Original advisories

CVE list

CVE-2015-8221 critical

Solution

Update to the latest version

Get Picasa

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Google Picasa versions earlier than 3.9.140.259