Adobe patches critical vulnerabilities in Photoshop and Illustrator CS5.x
- 05 June, 2012 12:02
- Comments
Adobe released several security updates on Monday, addressing nine arbitrary code execution vulnerabilities that affect Adobe Photoshop and Adobe Illustrator CS5.x for Windows and Mac OS X.
Back in May, Adobe alerted users about the existence of eight security vulnerabilities in the CS5.x versions of Photoshop, Illustrator and Flash Professional.
At the time, the company advised customers to upgrade to the CS6 versions of those products, which aren't affected by those vulnerabilities, or to exercise caution when opening files from unknown sources if upgrading is not possible.
Adobe's suggestion that customers should pay a considerable amount of money -- US$199 per product upgrade -- in order to protect their systems from vulnerabilities that affect products they already bought, was strongly criticized by some security experts.
However, a few days after the initial security advisories were published, the software company publicly committed to releasing security patches for the CS5.x versions of the affected products as well.
On Monday, Adobe released security updates for Photoshop CS5 (12.0) and Photoshop CS5.1 (12.1) that address three arbitrary code execution vulnerabilities present in those products. If they were left unpatched, hackers could exploit them to take control of the operating system by tricking users into opening maliciously crafted files.
At the same time, the company released security patches for Adobe Illustrator CS5 (15.0) and Adobe Illustrator CS5.5 (15.1). These address six vulnerabilities that could be exploited in a similar manner and for the same goal as the Photoshop ones.
Adobe is not aware of any ongoing attacks that target the vulnerabilities patched by the newly released Photoshop and Illustrator security updates, the company said in the corresponding security bulletins.
Adobe Flash Professional CS5.5.1 remains vulnerable to a buffer overflow vulnerability that can lead to arbitrary code execution. The company is working on a patch and will release it at a later date.
Recommended
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- Bookmark this page
- Share this article
- Got more on this story? Email CIO
- Follow CIO on twitter
-
Solving the skills conundrum – part 1
-
Australia suspected to have PRISM data: Ludlam
-
Australia Post’s mail business to lose $200 million this year
-
Australia Post’s mail business to lose $200 million this year
-
Microsoft's ambivalence about Office on the Web gives Apple shot with iWork on iCloud
-
Unleashing the Power of Information
If business-relevant information is not well managed, secured and analysed, it can become an underutilized asset or—worst case—a legal and competitive liability. Nearly all of the IT and business executives who responded to a recent survey recognise this risk, and say they understand the importance of having an enterprise information management (EIM) strategy. Find out more on how to reduce costs, improve competitiveness and avoid risk by making information management an enterprisewide strategic priority. -
Russian Underground 101
This research paper intends to provide a brief summary of the cybercriminal underground and shed light on the basic types of hacker activity in Russia. It discusses fundamental concepts that Russian hackers follow and the information they share with their peers. It also examines prices charged for various types of services, along with how prevalent the given services are in advertisements. The primary features of each type of activity and examples of associated service offerings are discussed as well. Read this paper. -
Staying Ahead of the Data Explosion
The total volume of data being processed and stored by businesses is rising exponentially. IDC has estimated that the size of the "digital universe" will increase 29 fold between 2010 and 2020. Data storage technology has undergone a steady increase in capacity, along with a steady decline in the cost per unit to store information. Unfortunately, data storage capacity is not keeping pace with data growth and necessitating greater intelligence in the storage infrastructure. Read more.
Get exclusive access to Invitation only events CIO, reports & analysis. 
