CVE-2007-2244
UnknownEPSS 35.39%
Last modified
CVE-2007-2244 is a vulnerability of currently unknown severity. Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.. EPSS estimates a 35.39% chance of exploitation in the next 30 days.
Description
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Golive | 9 |
| Adobe | Illustrator | cs3 |
| Adobe | Photoshop | 9.0.2 |
References
- http://secunia.com/advisories/25023Vendor Advisory
- http://secunia.com/advisories/26846Vendor Advisory
- http://secunia.com/advisories/26864Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1523Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3442Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3443Vendor Advisory
- http://secunia.com/advisories/25023Vendor Advisory
- http://secunia.com/advisories/26846Vendor Advisory
- http://secunia.com/advisories/26864Vendor Advisory
- http://www.vupen.com/english/advisories/2007/1523Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3442Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3443Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-2244?
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) BMP, (2) DIB, or (3) RLE file.
How severe is CVE-2007-2244?
Severity scoring for CVE-2007-2244 is pending analysis. The EPSS model estimates a 35.39% probability of exploitation in the next 30 days.
How do I fix CVE-2007-2244?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2007-2244?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
