#!/usr/bin/perl
#
# Title:
# Adobe Photoshop CS4 Extended 11.0 ABR File Handling Remote Buffer
Overflow PoC
#
#
# Summary: The Adobe® Photoshop® family of products is the
ultimate playground for
# bringing out the best in your digital images, transforming them into
anything you
# can imagine and showcasing them in extraordinary ways.
#
# Description: Adobe Photoshop CS4 Extended suffers from a buffer overflow
vulnerability
# when dealing with .ABR (brushes) format file. The application failz to
sanitize the
# user input resulting in a memory corruption, overwriting several memory
registers which
# can aid the atacker to gain the power of executing arbitrary code or
denial of service.
#
# Vendor:
# Adobe Systems Incorporated
#
# Product Web Page:
# http://www.adobe.com/
#
# Current Version:
# CS4 Extended 11.0.0.0
#
# Tested On:
# Microsoft Windwos XP Professional SP3 (English)
#
#
#
---------------------------------------------------------------------------
#
# (990.bc0): Access violation - code c0000005 (first chance)
# First chance exceptions are reported before any exception handling.
# This exception may be expected and handled.
# eax=41414141 ebx=0012da50 ecx=00000065 edx=0000001c esi=0000001c
edi=41414141
# eip=0102af70 esp=0012d544 ebp=05640f74 iopl=0 nv up ei pl nz na
pe nc
# cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000
efl=00010206
# *** Defaulted to export symbols for C:\Program Files\Adobe\Adobe
Photoshop CS4\Photoshop.exe -
# Photoshop!AIF::float4::size+0x16b480:
# 0102af70 3930 cmp dword ptr [eax],esi
ds:0023:41414141=????????
#
#
---------------------------------------------------------------------------