Adobe Photoshop CS4 vulnerabilities

4 CVEs affecting Adobe Photoshop CS4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-2028, published 2012-05-09.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-1296, published 2010-05-27. High severity, CVSS 9.3. EPSS: 19.6% chance of exploitation in the next 30 days. Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) .ASL, (2) .ABR, or (3) .GRD file.
• CVE-2012-2027, published 2012-05-09. High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.
• CVE-2012-2028, published 2012-05-09. High severity, CVSS 9.3. EPSS: 7% chance of exploitation in the next 30 days. Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via unspecified vectors.
• CVE-2010-1279, published 2010-05-05. High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file.