Lucene search

RedhatCVE-2012-4447

HistoryOct 28, 2012 - 3:55 p.m.

CVE-2012-4447

2012-10-2815:55:01

CWE-119

redhat

web.nvd.nist.gov

cve-2012-4447

nvd

denial of service

remote attackers

arbitrary code

tiff image

pixarlog compression format

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.037

Percentile

91.8%

JSON

Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF image using the PixarLog Compression format.

Affected configurations

Nvd

Node

libtifflibtiffRange≤4.0.2

libtifflibtiffMatch3.4

libtifflibtiffMatch3.4beta18

libtifflibtiffMatch3.4beta24

libtifflibtiffMatch3.4beta28

libtifflibtiffMatch3.4beta29

libtifflibtiffMatch3.4beta31

libtifflibtiffMatch3.4beta32

libtifflibtiffMatch3.4beta34

libtifflibtiffMatch3.4beta35

libtifflibtiffMatch3.4beta36

libtifflibtiffMatch3.4beta37

libtifflibtiffMatch3.5.1

libtifflibtiffMatch3.5.2

libtifflibtiffMatch3.5.3

libtifflibtiffMatch3.5.4

libtifflibtiffMatch3.5.5

libtifflibtiffMatch3.5.6

libtifflibtiffMatch3.5.6beta

libtifflibtiffMatch3.5.7

libtifflibtiffMatch3.5.7alpha

libtifflibtiffMatch3.5.7alpha2

libtifflibtiffMatch3.5.7alpha3

libtifflibtiffMatch3.5.7alpha4

libtifflibtiffMatch3.5.7beta

libtifflibtiffMatch3.6.0

libtifflibtiffMatch3.6.0beta

libtifflibtiffMatch3.6.0beta2

libtifflibtiffMatch3.6.1

libtifflibtiffMatch3.7.0

libtifflibtiffMatch3.7.0alpha

libtifflibtiffMatch3.7.0beta

libtifflibtiffMatch3.7.0beta2

libtifflibtiffMatch3.7.1

libtifflibtiffMatch3.7.2

libtifflibtiffMatch3.7.3

libtifflibtiffMatch3.7.4

libtifflibtiffMatch3.8.0

libtifflibtiffMatch3.8.1

libtifflibtiffMatch3.8.2

libtifflibtiffMatch3.9

libtifflibtiffMatch3.9.0

libtifflibtiffMatch3.9.0beta

libtifflibtiffMatch3.9.1

libtifflibtiffMatch3.9.2

libtifflibtiffMatch3.9.2-5.2.1

libtifflibtiffMatch3.9.3

libtifflibtiffMatch3.9.4

libtifflibtiffMatch3.9.5

libtifflibtiffMatch4.0

libtifflibtiffMatch4.0alpha

libtifflibtiffMatch4.0beta1

libtifflibtiffMatch4.0beta2

libtifflibtiffMatch4.0beta3

libtifflibtiffMatch4.0beta4

libtifflibtiffMatch4.0beta5

libtifflibtiffMatch4.0beta6

libtifflibtiffMatch4.0.1

VendorProductVersionCPE
libtifflibtiff3.9.1cpe:/a:libtiff:libtiff:3.9.1:::
libtifflibtiff3.9.2-5.2.1cpe:/a:libtiff:libtiff:3.9.2-5.2.1:::
libtifflibtiff4.0cpe:/a:libtiff:libtiff:4.0:beta1::
libtifflibtiffcpe:/a:libtiff:libtiff::::
libtifflibtiff3.6.1cpe:/a:libtiff:libtiff:3.6.1:::
libtifflibtiff4.0cpe:/a:libtiff:libtiff:4.0:beta5::
libtifflibtiff3.5.2cpe:/a:libtiff:libtiff:3.5.2:::
libtifflibtiff3.5.7cpe:/a:libtiff:libtiff:3.5.7:beta::
libtifflibtiff3.6.0cpe:/a:libtiff:libtiff:3.6.0:beta::
libtifflibtiff3.7.0cpe:/a:libtiff:libtiff:3.7.0:beta::

Vendor	Product	Version	CPE
libtiff	libtiff	3.9.1	cpe:/a:libtiff:libtiff:3.9.1:::
libtiff	libtiff	3.9.2-5.2.1	cpe:/a:libtiff:libtiff:3.9.2-5.2.1:::
libtiff	libtiff	4.0	cpe:/a:libtiff:libtiff:4.0:beta1::
libtiff	libtiff		cpe:/a:libtiff:libtiff::::
libtiff	libtiff	3.6.1	cpe:/a:libtiff:libtiff:3.6.1:::
libtiff	libtiff	4.0	cpe:/a:libtiff:libtiff:4.0:beta5::
libtiff	libtiff	3.5.2	cpe:/a:libtiff:libtiff:3.5.2:::
libtiff	libtiff	3.5.7	cpe:/a:libtiff:libtiff:3.5.7:beta::
libtiff	libtiff	3.6.0	cpe:/a:libtiff:libtiff:3.6.0:beta::
libtiff	libtiff	3.7.0	cpe:/a:libtiff:libtiff:3.7.0:beta::