What’s Vulnerable › Vulnerabilities

CVE-2010-1296

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-05-27 · updated 2026-06-16
• Weakness: CWE-119

Description

Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file.

Affected products

• Adobe Photoshop Cs4: through 11.0.1; 11.0

References

• http://www.adobe.com/support/security/bulletins/apsb10-13.html
• http://www.exploit-db.com/exploits/12751
• http://www.exploit-db.com/exploits/12752
• http://www.exploit-db.com/exploits/12753
• http://www.securityfocus.com/bid/40389
• http://www.securitytracker.com/id?1024042
• http://www.zeroscience.mk/codes/psbrush_bof.txt
• http://www.zeroscience.mk/codes/psgradient_bof.txt
• http://www.zeroscience.mk/codes/psstyle_bof.txt
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4938.php
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4939.php
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4940.php

Get alerted when CVE-2010-1296 or the next vulnerability affects your stack