CVE-2011-2747
Google Picasa < 3.6 Build 105.67 - Remote Code Execution via Crafted JPEG Image
Title source: llmDescription
Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/73980
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68735
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/45293
Various Sources x_refsource_misc
http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1
Vendor Advisory x_refsource_misc
http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx
Scores
EPSS
0.0430
EPSS Percentile
89.9%
Details
CWE
CWE-94
Status
published
Products (10)
google/picasa
3.5
google/picasa
3.5_build_79.67
google/picasa
3.5_build_79.69
google/picasa
3.5_build_79.74
google/picasa
3.5_build_79.81
google/picasa
3.5_build_95.18
google/picasa
3.6_build_95.25
google/picasa
3.6_build_105.41
google/picasa
3.6_build_105.61
google/picasa
< 3.6_build_105.65
Published
Jul 28, 2011
Tracked Since
Feb 18, 2026