Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29692
HistoryFeb 15, 2023 - 12:00 a.m.

LibTIFF tiffcrop.c:3609 buffer overflow vulnerability

2023-02-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

LibTIFF is a library for reading and writing TIFF (Tagged Image File Format) files. The library contains a number of command line tools for working with TIFF files. LibTIFF version 4.4.0 is vulnerable to a buffer overflow vulnerability, which stems from a boundary error in tiffcrop at tools/tiffcrop.c:3609 when handling untrusted input. An attacker could exploit this vulnerability to cause a denial of service via a crafted tiff file.

CPENameOperatorVersion
libtiff libtiffle4.4.0

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H