Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-1173

Опубликовано: 04 июн. 2012
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libtiff:libtiff:3.9.4:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.06846
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
почти 14 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

redhat
около 14 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

debian
почти 14 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow r ...

github
почти 4 года назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

oracle-oval
около 14 лет назад

ELSA-2012-0468: libtiff security update (IMPORTANT)

EPSS

Процентиль: 91%
0.06846
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189