{"schemaVersion":3,"id":"CVE-2008-1765","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header.  NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244.","dates":{"published":"2008-04-23T10:00:00.000Z","modified":"2024-08-07T08:32:01.307Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.19962,"percentile":0.97412,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.19962},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.19962,"percentile":0.97412}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.19962,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.19962,"percentile":0.97412}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_2612E90B040C3CD3","name":"Exploit Reference (archives.neohapsis.com)","source":"reference","url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"5479","name":"Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/5479","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/5479.txt","codes":["OSVDB-44579","CVE-2008-1765"]},"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"adobe","product":"photoshop","name":"photoshop","label":"photoshop","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.2","eol":null,"hubHref":"/vendor/adobe/photoshop"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/28874","label":"www.securityfocus.com/bid/28874","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.adobe.com/support/security/advisories/apsa08-04.html","label":"www.adobe.com/support/security/advisories/apsa08-04.html","hostname":"www.adobe.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/5479","label":"www.exploit-db.com/exploits/5479","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB"]},{"url":"http://www.vupen.com/english/advisories/2008/1317","label":"www.vupen.com/english/advisories/2008/1317","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html","label":"archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html","hostname":"archives.neohapsis.com","tags":["Mailing List","X Refsource FULLDISC","Exploit"]},{"url":"http://secunia.com/advisories/29838","label":"secunia.com/advisories/29838","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41941","label":"exchange.xforce.ibmcloud.com/vulnerabilities/41941","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://securitytracker.com/id?1019910","label":"securitytracker.com/id?1019910","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-04-23T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T08:32:01.307Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T20:05:45.189Z","stale":false,"partial":false}}