Two vulnerabilities have been discovered in Adobe Photoshop, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the "Standard MultiPlugin.8BF" module when processing a Portable Network Graphics (PNG) image can be exploited to cause a heap-based buffer overflow via a specially crafted "tRNS" chunk size.

2) Insufficient validation in Photoshop.exe when decompressing SGI24LogLum-compressed TIFF images can be exploited via a specially crafted TIFF image to cause a heap-based buffer overflow.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code, but requires tricking a user into opening a malicious image.

Solution
Update to version 13.0.1.

Provided and/or discovered by
1) Francis Provencher via Secunia.
2) Carsten Eiram, Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
APSB12-20:
http://www.adobe.com/support/security/bulletins/apsb12-20.html

Secunia Research:
http://secunia.com/secunia_research/2012-29/

Francis Provencher:
http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=60&Itemid=60

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers