The flaw, rated "highly critical" by tracking firm Secunia, is caused by the improper processing of bitmap files in Adobe Photoshop and can lead to a stack-based buffer overflow. If successful, attackers can launch arbitrary code that could compromise a user's system by duping users into opening a malicious file.
While public code has been posted by a researcher named Marsu, there are no reports of active exploits.
The bug resides in Photoshop CS2 and CS3, according to a Secunia advisory. As users await a patch, experts recommend not opening untrusted bitmap files, with extensions .bmp, .dib and .rle.
An Adobe spokesperson could not be reached for comment.
Flaw in Adobe Photoshop could compromise systems
A popular Adobe image-editing program contains a major vulnerability for which public exploit code is available, researchers said today.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
iTnews State of Security Breakfast comes to Sydney
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
What’s Next?
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
