Published: 11/11/2012 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff
debian debian linux 7.0
debian debian linux 6.0
canonical ubuntu linux 11.10
canonical ubuntu linux 12.10
canonical ubuntu linux 12.04
canonical ubuntu linux 8.04
canonical ubuntu linux 10.04
redhat enterprise linux server 5.0
redhat enterprise linux workstation 5.0
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux desktop 5.0
redhat enterprise linux eus 6.3
opensuse opensuse 11.4

Synopsis Moderate: libtiff security update Type/Severity Security Advisory: Moderate Topic Updated libtiff packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulne ...

Debian Bug report logs - #692345 tiff: CVE-2012-4564 Package: tiff; Maintainer for tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Mon, 5 Nov 2012 08:36:01 UTC Severity: grave Tags: security Found in version 402-4 Fixed in versions tiff/402-5, tiff/394 ...

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

It was discovered that ppm2tiff of the TIFF tools, a set of utilities for TIFF manipulation and conversion, is not properly checking the return value of an internal function used in order to detect integer overflows As a consequence, ppm2tiff suffers of a heap-based buffer overflow This allows attacker to potentially execute arbitrary code via a ...

A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF images using the Pixar Log Format encoding An attacker could create a specially-crafted TIFF file that, when opened, could cause an application using libtiff to crash or, possibly, execute arbitrary code with the privileges of the user running the application (C ...

NVD-CWE-Other http://www.openwall.com/lists/oss-security/2012/11/02/7 http://www.osvdb.org/86878 http://secunia.com/advisories/51133 http://www.securityfocus.com/bid/56372 http://www.openwall.com/lists/oss-security/2012/11/02/3 https://bugzilla.redhat.com/show_bug.cgi?id=871700 http://www.debian.org/security/2012/dsa-2575 http://www.ubuntu.com/usn/USN-1631-1 http://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html http://rhn.redhat.com/errata/RHSA-2012-1590.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79750 https://access.redhat.com/errata/RHSA-2012:1590 https://usn.ubuntu.com/1631-1/https://nvd.nist.gov

CVE-2012-4564

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect