Skip to content

CVE-2012-4170

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute...

9.3 HighPublic exploit

CVE-2012-4170 is a high vulnerability (CVSS 9.3) in Adobe Photoshop Cs6, published August 31, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.0%, the 95th percentile. No source names a fixed version.

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

Exploit likelihood

11.0%Down 7.5 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

Record: CVE-2012-4170
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

Record: CVE-2012-4170
Updated: 2026-11-02

EUVDEUVD-2012-4114 No score

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

Record: EUVD-2012-4114
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vcw4-qmwm-q9mx No score

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute...

Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.

Record: GHSA-vcw4-qmwm-q9mx
Weakness: CWE-119
Updated: 2026-11-02

Affected products

adobe photoshop cs6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Adobe Photoshop CS6 - '.png' Parsing Heap Overflow	2012-09-01

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References