| ID |
CVE-2013-4232
|
| Summary |
Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:libtiff:libtiff:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:libtiff:libtiff:4.0.3:*:*:*:*:*:*:*
-
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
-
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 6.8 (as of 13-02-2023 - 04:45) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-399 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
| redhat
via4
|
| advisories | | | rpms | - libtiff-0:3.9.4-10.el6_5
- libtiff-debuginfo-0:3.9.4-10.el6_5
- libtiff-devel-0:3.9.4-10.el6_5
- libtiff-static-0:3.9.4-10.el6_5
- libtiff-0:3.8.2-19.el5_10
- libtiff-debuginfo-0:3.8.2-19.el5_10
- libtiff-devel-0:3.8.2-19.el5_10
|
|
| refmap
via4
|
| confirm | | | debian | DSA-2744 | | mlist | - [oss-security] 20130809 Re: CVE Request -- Four (stack-based) buffer overflows and one use-after-free in libtiff v4.0.3 reported by Pedro Ribeiro
- [tiff] 20130801 Vulnerabilities in libtiff 4.0.3
| | secunia | |
|
| Last major update |
13-02-2023 - 04:45 |
| Published |
10-09-2013 - 19:55 |
| Last modified |
13-02-2023 - 04:45 |
