Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-1173

Опубликовано: 04 июн. 2012
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libtiff:libtiff:3.9.4:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.01355
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
около 13 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

redhat
больше 13 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

debian
около 13 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow r ...

github
больше 3 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

oracle-oval
больше 13 лет назад

ELSA-2012-0468: libtiff security update (IMPORTANT)

EPSS

Процентиль: 79%
0.01355
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189