Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.802313
Category:General
Title:Google Picasa JPEG Image Processing Remote Code Execution Vulnerability (Windows)
Summary:This host is installed with google picasa and is prone to remote; code execution vulnerability.
Description:Summary:
This host is installed with google picasa and is prone to remote
code execution vulnerability.

Vulnerability Insight:
The flaw is due to an unspecified error, when handling certain
properties of an image file and can be exploited via a specially crafted
JPEG image.

Vulnerability Impact:
Successful exploitation could allow remote attackers to execute arbitrary
code or cause a denial of service condition.

Affected Software/OS:
Google Picasa versions prior to 3.6 build 105.67

Solution:
Upgrade to the Google Picasa 3.6 build 105.67 or later.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: BugTraq ID: 48725
Common Vulnerability Exposure (CVE) ID: CVE-2011-2747
http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1
http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx
http://osvdb.org/73980
http://secunia.com/advisories/45293
XForce ISS Database: google-picasa-jpeg-code-exec(68735)
https://exchange.xforce.ibmcloud.com/vulnerabilities/68735
CopyrightCopyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.