CVE-2007-2365: Adobe Photoshop, Illustrator, GoLive PNG buffer overflow

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityThe flaw allows remote code execution with complete impact and has public exploit code, but it requires user interaction and affects older, largely retired Adobe versions.

What it is

A buffer overflow in Adobe Photoshop CS2/CS3, Photoshop Elements 5.0, Illustrator CS3 and GoLive 9 is triggered by a crafted .PNG file. Because the affected applications are widely used on workstations, a malicious image can crash the application or allow code execution in the context of the user who opens it.

Impact

An attacker can execute arbitrary code with the privileges of the user who opens the crafted PNG, leading to full compromise of that workstation. The CVSS 2.0 vector rates confidentiality, integrity and availability impact as complete.

Attack surface

The flaw is reached remotely by delivering a malicious .PNG file that the victim opens in one of the affected Adobe applications. No authentication is required, but exploitation is user-assisted because the victim must open the file.

Exploitation

The record is not listed in CISA KEV and no ransomware use is documented, but EPSS is 0.45653 (98.7th percentile) and an Exploit-DB entry (3812) exists, indicating public exploit code is available.

What to do

• Apply the Adobe security bulletins apsb07-13, apsb07-16 and apsb07-17 updates for the affected products.
• Upgrade to a supported, non-vulnerable version of Photoshop, Photoshop Elements, Illustrator or GoLive where possible.
• Block or quarantine untrusted .PNG files at email and web gateways before they reach Adobe applications.
• Train users not to open image attachments or downloads from unknown sources.
• Run affected Adobe applications with least privilege and consider application isolation or sandboxing.

Detection

• Monitor for unexpected crashes or abnormal process exits in Photoshop, Illustrator, Photoshop Elements and GoLive.
• Hunt for child processes spawned by Adobe applications, especially command shells or scripting hosts.
• Inspect network and endpoint logs for .PNG files delivered from external or untrusted sources to users of the affected products.
• Use file inspection or sandboxing to flag malformed PNG files with anomalous chunk sizes or structure.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.