Cyber Risks · Cisco Talos

Vulnerability Spotlight: Computerinsel Photoline Multiple Vulnerabilities

Summary: Cisco Talos disclosed several vulnerabilities in Computerinsel Photoline 20.54, an image-processing tool popular in graphic design, all in the software's parsing functionality. Specially crafted PSD, ANI, and PCX files each trigger an out-of-bounds write that overwrites arbitrary data and can let an attacker gain code execution.

Why it matters: The attack path is a single image file opened in a design tool, and Talos lists Snort rules 46452-46453, 46455-46456, and 46459-46460 as the current detection - rules the vendor notes may change as more vulnerability information arrives.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Related