A vulnerability has been reported in multiple Adobe products, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when handling BMP files. This can be exploited to cause a buffer overflow via a BMP file having a malformed header.

This may be related to:
SA25023
SA25044

Successful exploitation may allow execution of arbitrary code via a specially crafted BMP file.

NOTE: Reportedly, the vulnerability can also be exploited when a malicious storage device (e.g. USB drives, cameras) is being attached to a vulnerable computer.

The vulnerability is reported in Adobe Photoshop Album Starter Edition 3.2 and Adobe After Effects CS3. Other versions may also be affected.

Solution
Do not process untrusted BMP files using the affected applications.
Further details available in Customer Area

Provided and/or discovered by
Scott Laurie

Changelog
Further details available in Customer Area

Original Advisory
Adobe:
http://www.adobe.com/support/security/advisories/apsa08-04.html
http://www.adobe.com/support/security/advisories/apsa08-05.html

http://archives.neohapsis.com/archives/fulldisclosure/2008-04/0551.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area