Serious vulnerability found in older versions of Photoshop/Flash/Illustrator

Serious security vulnerabilities have been discovered in Adobe Photoshop, as well as in its companion applications Adobe Illustrator and Adobe Flash Professional.

Adobe is not issuing a free patch to correct the flaws, however. Instead, the company says that customers who want to protect themselves should pay for the upgrades to the next versions of the software, which were released Monday. If you don't want to pay, Adobe asks that you "exercise caution."

The vulnerabilities in Photoshop CS5.5 and earlier, Illustrator CS5.5 and earlier and Flash Professional CS5.5 and earlier leave Mac and Windows systems open to remote exploitation by an attacker using a rigged TIFF file, Adobe said in a press release

To tackle this problem, Adobe is recommending its users upgrade to the CS6 equivalents of their affected applications. Doing so will cost $99 for Flash Professional, $199 for Photoshop and $249 for Illustrator.


Lets see how long they will stick to the upgrade path as the patch...once this issue gets exploited enough they will likely change their "patch" position.

Subscribe to our Newsletter

Search ALL Articles

Managed V. Non-Managed


US-CERT Latest Warnings

Latest US-CERT Released Warnings