CVE-2011-2747

Published 28 Jul 2011 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.3%

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.

Affected products

n/a · n/a

References

http://osvdb.org/73980 http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1 http://secunia.com/advisories/45293 https://exchange.xforce.ibmcloud.com/vulnerabilities/68735 http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx