Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2012-1173

Опубликовано: 04 июн. 2012
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8

Описание

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

РелизСтатусПримечание
devel

released

3.9.5-2ubuntu1
hardy

released

3.8.2-7ubuntu3.10
lucid

released

3.9.2-2ubuntu0.8
maverick

released

3.9.4-2ubuntu0.5
natty

released

3.9.4-5ubuntu6.1
oneiric

released

3.9.5-1ubuntu1.1
upstream

needs-triage

Показывать по

EPSS

Процентиль: 79%
0.01355
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

redhat
больше 13 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

nvd
около 13 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

debian
около 13 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow r ...

github
больше 3 лет назад

Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.

oracle-oval
больше 13 лет назад

ELSA-2012-0468: libtiff security update (IMPORTANT)

EPSS

Процентиль: 79%
0.01355
Низкий

6.8 Medium

CVSS2