CVE-2011-2747 Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.
HighCVSS 9.3
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google picasa | <= 3.6_build_105.65 | No fix listed |
| Google picasa | = 3.5 | No fix listed |
| Google picasa | = 3.5_build_79.67 | No fix listed |
| Google picasa | = 3.5_build_79.69 | No fix listed |
| Google picasa | = 3.5_build_79.74 | No fix listed |
| Google picasa | = 3.5_build_79.81 | No fix listed |
| Google picasa | = 3.5_build_95.18 | No fix listed |
| Google picasa | = 3.6_build_95.25 | No fix listed |
| Google picasa | = 3.6_build_105.41 | No fix listed |
| Google picasa | = 3.6_build_105.61 | No fix listed |
References
- 73980 vdb-entry
- picasa.google.com
- 45293 third-party-advisory vendor-advisory
- www.microsoft.com
- google-picasa-jpeg-code-exec(68735) vdb-entry