9.3

CVE-2013-1960

Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Remotesensing ≫ Libtiff Version <= 4.0.3
Remotesensing ≫ Libtiff Version 3.4
Remotesensing ≫ Libtiff Version 3.4 Update beta18
Remotesensing ≫ Libtiff Version 3.4 Update beta24
Remotesensing ≫ Libtiff Version 3.4 Update beta28
Remotesensing ≫ Libtiff Version 3.4 Update beta29
Remotesensing ≫ Libtiff Version 3.4 Update beta31
Remotesensing ≫ Libtiff Version 3.4 Update beta32
Remotesensing ≫ Libtiff Version 3.4 Update beta34
Remotesensing ≫ Libtiff Version 3.4 Update beta35
Remotesensing ≫ Libtiff Version 3.4 Update beta36
Remotesensing ≫ Libtiff Version 3.4 Update beta37
Remotesensing ≫ Libtiff Version 3.5.1
Remotesensing ≫ Libtiff Version 3.5.2
Remotesensing ≫ Libtiff Version 3.5.3
Remotesensing ≫ Libtiff Version 3.5.4
Remotesensing ≫ Libtiff Version 3.5.5
Remotesensing ≫ Libtiff Version 3.5.6
Remotesensing ≫ Libtiff Version 3.5.6 Update beta
Remotesensing ≫ Libtiff Version 3.5.7
Remotesensing ≫ Libtiff Version 3.5.7 Update alpha
Remotesensing ≫ Libtiff Version 3.5.7 Update alpha2
Remotesensing ≫ Libtiff Version 3.5.7 Update alpha3
Remotesensing ≫ Libtiff Version 3.5.7 Update alpha4
Remotesensing ≫ Libtiff Version 3.5.7 Update beta
Remotesensing ≫ Libtiff Version 3.6.0
Remotesensing ≫ Libtiff Version 3.6.0 Update beta
Remotesensing ≫ Libtiff Version 3.6.0 Update beta2
Remotesensing ≫ Libtiff Version 3.6.1
Remotesensing ≫ Libtiff Version 3.7.0
Remotesensing ≫ Libtiff Version 3.7.0 Update alpha
Remotesensing ≫ Libtiff Version 3.7.0 Update beta
Remotesensing ≫ Libtiff Version 3.7.0 Update beta2
Remotesensing ≫ Libtiff Version 3.7.1
Remotesensing ≫ Libtiff Version 3.7.2
Remotesensing ≫ Libtiff Version 3.7.3
Remotesensing ≫ Libtiff Version 3.7.4
Remotesensing ≫ Libtiff Version 3.8.0
Remotesensing ≫ Libtiff Version 3.8.1
Remotesensing ≫ Libtiff Version 3.8.2
Remotesensing ≫ Libtiff Version 3.9.0
Remotesensing ≫ Libtiff Version 3.9.0 Update beta
Remotesensing ≫ Libtiff Version 3.9.1
Remotesensing ≫ Libtiff Version 3.9.2
Remotesensing ≫ Libtiff Version 3.9.3
Remotesensing ≫ Libtiff Version 3.9.4
Remotesensing ≫ Libtiff Version 4.0.0
Remotesensing ≫ Libtiff Version 4.0.1
Remotesensing ≫ Libtiff Version 4.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.82% 0.956
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html
http://rhn.redhat.com/errata/RHSA-2014-0223.html
http://seclists.org/oss-sec/2013/q2/254
http://secunia.com/advisories/53237
Vendor Advisory
http://secunia.com/advisories/53765
Vendor Advisory
http://www.debian.org/security/2013/dsa-2698
http://www.securityfocus.com/bid/59609
https://bugzilla.redhat.com/show_bug.cgi?id=952158