The flaw, rated "highly critical" by tracking firm Secunia, is caused by the improper processing of bitmap files in Adobe Photoshop and can lead to a stack-based buffer overflow. If successful, attackers can launch arbitrary code that could compromise a user's system by duping users into opening a malicious file.
While public code has been posted by a researcher named Marsu, there are no reports of active exploits.
The bug resides in Photoshop CS2 and CS3, according to a Secunia advisory. As users await a patch, experts recommend not opening untrusted bitmap files, with extensions .bmp, .dib and .rle.
An Adobe spokesperson could not be reached for comment.
Flaw in Adobe Photoshop could compromise systems
A popular Adobe image-editing program contains a major vulnerability for which public exploit code is available, researchers said today.
Got a news tip for our journalists? Share it with us anonymously here.
SPONSORED RESOURCES
Rethinking Ransomware Recovery: Closing the Detection and Recovery Gap in Asia Pacific
Strategies to Counter the Ransomware Threat in APJ
Craft your ideal hybrid multicloud strategy
Secure your AI future with generative AI defense
See how F5 protects modern applications against evolving threats

Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC



