CVE-2012-2052

Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the contributor comments element.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
adobephotoshop_cs5
12.0
adobephotoshop_cs5
12.0.1
adobephotoshop_cs5
12.0.2
adobephotoshop_cs5
12.0.3
adobephotoshop_cs5
12.0.4
adobephotoshop_cs5.1
12.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/show/osvdb/81832
http://retrogod.altervista.org/9sg_photoshock_adv.htm
http://retrogod.altervista.org/9sg_photoshock_u3d.htm
http://seclists.org/bugtraq/2012/May/58
http://secunia.com/advisories/49160
http://www.adobe.com/support/security/bulletins/apsb12-11.html
http://www.securityfocus.com/bid/53464
http://osvdb.org/show/osvdb/81832
http://retrogod.altervista.org/9sg_photoshock_adv.htm
http://retrogod.altervista.org/9sg_photoshock_u3d.htm
http://seclists.org/bugtraq/2012/May/58
http://secunia.com/advisories/49160
http://www.adobe.com/support/security/bulletins/apsb12-11.html
http://www.securityfocus.com/bid/53464