« Volver al listado

CVE-2012-0275

Estado: ModificadaAlta (10)—

Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Adobe — Photoshop Cs5.5Adobe — Photoshop CS6

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0275",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-09-04T11:04:48.903",
  "references": [
    {
      "url": "http://secunia.com/secunia_research/2012-29/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb12-11.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb12-20.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/55372",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1027477",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78185",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2012-29/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb12-11.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb12-20.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/55372",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027477",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78185",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted TIFF image with SGI24LogLum compression."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de desbordamiento de pila basado en búfer en photoshop.exe en Adobe Photoshop CS5 12.x anterior a 12.0.5, CS5.1 12.1.x anterior a 12.1.1, y CV6 13.x anterior a 13.0.1 permite a atacantes remotos ejecutar código arbitrario a través de un crafted imagen TIFF con compresión SGI24LogLum."
    }
  ],
  "lastModified": "2026-06-16T23:37:01.883",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:photoshop_cs5.5:12.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3DCF371-945C-4C40-BD86-75100BF719F5"
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop_cs5.5:12.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "126BC3AE-87E1-4DB8-94A1-F18D037372D8"
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop_cs5.5:12.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43BED1A5-72FB-41FF-B77A-31174C7E134B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop_cs5.5:12.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9BBE6E8-2687-4FE3-9FF9-406E2763E346"
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop_cs5.5:12.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "443E8449-19CF-4ADF-874F-E6B77D088519"
            },
            {
              "criteria": "cpe:2.3:a:adobe:photoshop_cs6:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6827A39-920D-4227-94F2-5952EBB0C782"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}