Check Point Advisories

Update Protection against Adobe Multiple Products BMP Image Header Handling Buffer Overflow Vulnerability

Check Point Reference:	CPAI-2008-105
Date Published:	13 May 2008
Severity:	High
Last Updated:	Monday 28 July, 2008
Source:	Secunia Advisory: SA29838
Industry Reference:	CVE-2008-1765
Protection Provided by:
Who is Vulnerable?	Adobe Systems Adobe Photoshop CS 3 Adobe Systems Adobe Photoshop Album Starter 3.2 Adobe Systems After Effects CS3
Vulnerability Description	A buffer overflow vulnerability was reported in the way multiple Adobe products handles BMP files. BMP is an image file format used to store bitmap digital images. A remote attacker could exploit this issue via a malformed BMP file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system.
Vulnerability Details	The vulnerability is due to boundary errors when a BMP file Image Header is processed by any of the affected Adobe products. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted BMP file. Successful exploitation of this issue may allow the attacker to execute arbitrary code on the affected system.