PT-2011-4059

CVE-2011-2747

·

Published

2011-07-28

·

Updated

2017-08-29

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Picasa versions prior to 3.6 Build 105.67
Description The issue arises from improper handling of invalid properties in JPEG images, allowing remote attackers to execute arbitrary code via a crafted image file.
Recommendations For versions prior to 3.6 Build 105.67, update to version 3.6 Build 105.67 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2011-2747
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com