Published: 03/05/2011 Updated: 13/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF prior to 3.9.5 allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 3.4
libtiff libtiff 3.7.0
libtiff libtiff 3.6.0
libtiff libtiff 3.6.1
libtiff libtiff 3.8.0
libtiff libtiff 3.7.3
libtiff libtiff 3.8.1
libtiff libtiff 3.9.3
libtiff libtiff 3.5.7
libtiff libtiff 3.8.2
libtiff libtiff 3.7.2
libtiff libtiff 3.9.2-5.2.1
libtiff libtiff 3.5.3
libtiff libtiff 3.7.1
libtiff libtiff 3.5.4
libtiff libtiff 3.5.2
libtiff libtiff
libtiff libtiff 3.9.2
libtiff libtiff 3.7.4
libtiff libtiff 3.5.5
libtiff libtiff 3.9.0
libtiff libtiff 3.5.6
libtiff libtiff 3.5.1
libtiff libtiff 3.9.1
libtiff libtiff 3.9

The TIFF library could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #678140 Two tiff issues: CVE-2012-2113 / CVE-2012-2088 Package: tiff; Maintainer for tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Tue, 19 Jun 2012 14:09:03 UTC Severity: grave Tags: security Found in version 394-5+sque ...

Several vulnerabilities were discovered in TIFF, a library set and tools to support the Tag Image File Format (TIFF), allowing denial of service and potential privilege escalation These vulnerabilities can be exploited via a specially crafted TIFF image CVE-2012-2113 The tiff2pdf utility has an integer overflow error when parsing images CVE-2 ...

CWE-189 https://bugzilla.redhat.com/show_bug.cgi?id=695887 http://www.remotesensing.org/libtiff/v3.9.5.html http://bugzilla.maptools.org/show_bug.cgi?id=2218 http://openwall.com/lists/oss-security/2011/04/12/10 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058478.html http://secunia.com/advisories/44271 http://www.securityfocus.com/bid/47338 http://ubuntu.com/usn/usn-1416-1 http://www.debian.org/security/2012/dsa-2552 http://secunia.com/advisories/50726 http://security.gentoo.org/glsa/glsa-201209-02.xml http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html https://usn.ubuntu.com/1416-1/https://nvd.nist.gov

CVE-2010-4665

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect