Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-3111.
AI-analyzed exploit summary The document describes a memory corruption vulnerability in Adobe Photoshop CC 2014 and Bridge CC 2014 due to an error in the PNG parser when processing a crafted PNG image with an oversized 'Length' value in the 'CHUNK' structure. Successful exploitation could lead to arbitrary code execution, but requires user interaction to open or preview a malicious file.
Description
Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.
Exploits (1)
The document describes a memory corruption vulnerability in Adobe Photoshop CC 2014 and Bridge CC 2014 due to an error in the PNG parser when processing a crafted PNG image with an oversized 'Length' value in the 'CHUNK' structure. Successful exploitation could lead to arbitrary code execution, but requires user interaction to open or preview a malicious file.