Description (CNA)
Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://osvdb.org/73980
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68735
- http://secunia.com/advisories/45293
- http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1
- http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx
ADP enrichment
No English description supplied.