critical9.3
CVE-2011-2747
Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a…
Impact
Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Picasa | through 3.6_build_105.65 Versions 3.5, 3.5_build_79.67, 3.5_build_79.69, 3.5_build_79.74, 3.5_build_79.81 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/73980
- http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1
- http://secunia.com/advisories/45293
- http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68735
- http://osvdb.org/73980
- http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1
- http://secunia.com/advisories/45293
- http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68735