CVE-2013-1960

Опубликовано: 03 июл. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:remotesensing:libtiff:*:*:*:*:*:*:*:*

Версия до 4.0.3 (включая)

cpe:2.3:a:remotesensing:libtiff:3.4:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta18:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta24:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta28:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta29:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta31:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta32:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta34:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta35:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta36:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.4:beta37:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.6:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.6:beta:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.7:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha2:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha3:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha4:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.5.7:beta:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.6.0:beta:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.0:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.0:alpha:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.0:beta:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.0:beta2:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.2:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.3:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.7.4:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.8.0:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.8.1:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.8.2:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.9.0:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.9.0:beta:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.9.1:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.9.2:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.9.3:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:3.9.4:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:remotesensing:libtiff:4.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06281

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2013-1960

ubuntu

около 12 лет назад

CVE-2013-1960

redhat

больше 12 лет назад

CVE-2013-1960

debian

около 12 лет назад

Heap-based buffer overflow in the t2p_process_jpeg_strip function in t ...

GHSA-vqhx-4gwh-xx5q

github

больше 3 лет назад

ELSA-2014-0223

oracle-oval

больше 11 лет назад

ELSA-2014-0223: libtiff security update (MODERATE)

EPSS

Процентиль: 91%

0.06281

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119