Critical vulnerability found in Photoshop CS3

Security researchers report that an exploit has been released that exploits the critical vulnerability of the newest version of Photoshop CS3.

The new exploit works with both Adobe Photoshop Creative Suite 3 and CS2, according to Secunia security bulletins .

The vulnerability uses the processing of Adobe Photoshop headers "evil" files .bmp, .dib and .rle. Thus, an attacker could cause a buffer overflow.
')
Although security researchers have published code that demonstrates how the vulnerability works, so far no active exploits have been found. But despite this, security experts recommend not tearing off files with the extensions listed above, obtained from unverified sources, until Adobe Systems releases the update.

Adobe announced that it had already become aware of the error and is now studying it.