CVE-2007-2365

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 41.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-30 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

Affected products

Adobe Golive: 9
Adobe Illustrator: cs3
Adobe Photoshop: 9.0.2
Adobe Photoshop Elements: 5.0

References

http://osvdb.org/35465
http://osvdb.org/38063
http://secunia.com/advisories/25044
http://secunia.com/advisories/26846
http://secunia.com/advisories/26864
http://securitytracker.com/id?1018792
http://www.adobe.com/support/security/bulletins/apsb07-13.html
http://www.adobe.com/support/security/bulletins/apsb07-16.html
http://www.adobe.com/support/security/bulletins/apsb07-17.html
http://www.securityfocus.com/bid/23698
http://www.vupen.com/english/advisories/2007/1577
http://www.vupen.com/english/advisories/2007/3442

Get alerted when CVE-2007-2365 or the next vulnerability affects your stack