• Gear
  • Shots
  • Photo Craft
  • Video
  • Wide Angle
  • Support
  • New Stuff
  • More
Wide Angle The Big Picture Security issue in CS5 / Adobe rant

Need some help with your New SmugMug Site?

Dgrin Challenges

Our Challenges moderator has lined up an new set of challenges for you. The Weekly Word Challenge. Get all the details and participate in the conversation Weekly Word Challenge.

Past DSS Challenge Winners, DSS Challenge Rules, and other important DSS Challenge information is here.

Looking for a little challenge? The Dgrin Mini-Challenges are a great way to challenge yourself. Take a moment to look through past winners and find the current Mini Challenge here.

From Around the Net

Enjoy a few of our favorite articles from around the 'net. If you have something you think we should see, post it here and we'll have a look.




Thread Tools Display Modes
Old May-11-2012, 12:49 AM
Richard is online now Richard OP
Mildly bemused
Richard's Avatar
Security issue in CS5 / Adobe rant
Adobe has announced that there is a buffer overflow vulnerability in CS5 which permits a maliciously crafted TIFF file to execute arbitrary code in both Windows and OS-X. In plain English, this means that a TIFF file can infect your machine.

Adobe's solution? Upgrade to CS6. That's right, folks, they are not planning on issuing a fix for CS5. Now it is not uncommon for software vendors to stop patching older software at some point. Apple's Flashback fix does not cover OS-X 10.5 or earlier, for example. Microsoft isn't patching Win2K anymore, though they are still supporting XP, which is now over 10 years old. CS5 became "obsolete" less than a week ago. What is truly galling is that the bug was reported to Adobe in September, 2011. Not only did they fail to address the issue in a timely fashion, they didn't even let us know about it until they could use the issue to pump sales of their latest product.

Really classy, Adobe.

Edit: Just a clarification. Don't panic. Your own TIFF files are perfectly safe and there's no reason to stop using CS5. Just beware of opening TIFFs from untrusted sources in Photoshop.
My Pics
Old May-11-2012, 05:11 AM
mercphoto is offline mercphoto
Bill Jurasz
mercphoto's Avatar
That is just awful. Glad I rarely need to use Photoshop anymore!
Bill Jurasz - Mercury Photography - Austin TX
A former sports shooter
Follow me at: https://www.flickr.com/photos/bjurasz/
Old May-12-2012, 02:02 PM
Richard is online now Richard OP
Mildly bemused
Richard's Avatar

Adobe has backtracked and now says that it will issue a fix: http://www.securityweek.com/adobe-ch...-security-flaw
My Pics
Tell The World!  
Similar Threads Thread Starter Forum Replies Last Post
Security Issue... 56Kruiser SmugMug Support 10 Nov-07-2011 12:19 PM
Possible security issue flyingdutchie SmugMug Support 15 May-17-2008 09:25 AM
Review - Adobe Lightroom beta Andy Finishing School 72 Apr-08-2007 10:56 AM
Adobe proposes universal digicam 'raw' image format Guzzler The Big Picture 3 Sep-27-2004 11:19 AM

Thread Tools
Display Modes

Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump