Adobe Introduces the Paid Security Fix

Nimey writes "Adobe has posted a security bulletin for Photoshop CS5 for Windows and OSX. It seems there is a critical security hole that will allow attackers to execute arbitrary code in the context of the user running the affected application. Adobe's fix? You need to pay to upgrade to Photoshop CS6. For users who cannot upgrade to Adobe Photoshop CS6, Adobe recommends users follow security best practices and exercise caution when opening files from unknown or untrusted sources."

Comments

And this is still on /.'s front page

[TubeSteak]

"Just released, and coming in at 370 MB in size, the Mac OS X 10.7.4 update includes general OS fixes, and addresses more than 30 security vulnerabilities. But aside from typical security fixes, Apple has made an interesting move in an effort to protect users. Through this latest software update, Safari 5.1.7 will now automatically disable older â" and typically more vulnerable â" versions of the Adobe Flash player. While many software vendors would prefer OS makers to keep their hands off their software, the move appears to be welcomed by Adobe, which has constantly battled vulnerabilities in its widely installed Flash Player."

Maybe Apple should disable Photoshop CS5 as well?

Re:Call it the Microsoft method

[fuzzyfuzzyfungus]

I'm pretty sure that Adobe doesn't have to plan security bugs... They just unlock the cages that they keep the Flash dev team in and let them use their keyboards for a few minutes.

Re:Slight correction

[__aaltlg1547]

Photoshop 6 == Photoshop CS1, the CS is quite important here.

And the CS stands for Compromised Security.