Google Picasa CR2 TIFF StripByteCounts Integer Overflow (CVE-2013-5357)

An integer overflow vulnerability exists in Google Picasa. The vulnerability is due to a failure to validate StripByteCounts value when processing CR2 TIFF files. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted CR2 image file with a vulnerable versi...