Lucene search
RedhatCVE-2012-5581HistoryJan 04, 2013 - 10:55 p.m.
CVE-2012-5581
2013-01-0422:55:02
CWE-119
redhat
web.nvd.nist.gov
60
cve-2012-5581
libtiff
buffer overflow
denial of service
arbitrary code
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.037
Percentile
91.8%
Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DOTRANGE tag in a TIFF image.
Affected configurations
Node
libtifflibtiffRange≤4.0.1
ORlibtifflibtiffMatch3.4
ORlibtifflibtiffMatch3.4beta18
ORlibtifflibtiffMatch3.4beta24
ORlibtifflibtiffMatch3.4beta28
ORlibtifflibtiffMatch3.4beta29
ORlibtifflibtiffMatch3.4beta31
ORlibtifflibtiffMatch3.4beta32
ORlibtifflibtiffMatch3.4beta34
ORlibtifflibtiffMatch3.4beta35
ORlibtifflibtiffMatch3.4beta36
ORlibtifflibtiffMatch3.4beta37
ORlibtifflibtiffMatch3.5.1
ORlibtifflibtiffMatch3.5.2
ORlibtifflibtiffMatch3.5.3
ORlibtifflibtiffMatch3.5.4
ORlibtifflibtiffMatch3.5.5
ORlibtifflibtiffMatch3.5.6
ORlibtifflibtiffMatch3.5.6beta
ORlibtifflibtiffMatch3.5.7
ORlibtifflibtiffMatch3.5.7alpha
ORlibtifflibtiffMatch3.5.7alpha2
ORlibtifflibtiffMatch3.5.7alpha3
ORlibtifflibtiffMatch3.5.7alpha4
ORlibtifflibtiffMatch3.5.7beta
ORlibtifflibtiffMatch3.6.0
ORlibtifflibtiffMatch3.6.0beta
ORlibtifflibtiffMatch3.6.0beta2
ORlibtifflibtiffMatch3.6.1
ORlibtifflibtiffMatch3.7.0
ORlibtifflibtiffMatch3.7.0alpha
ORlibtifflibtiffMatch3.7.0beta
ORlibtifflibtiffMatch3.7.0beta2
ORlibtifflibtiffMatch3.7.1
ORlibtifflibtiffMatch3.7.2
ORlibtifflibtiffMatch3.7.3
ORlibtifflibtiffMatch3.7.4
ORlibtifflibtiffMatch3.8.0
ORlibtifflibtiffMatch3.8.1
ORlibtifflibtiffMatch3.8.2
ORlibtifflibtiffMatch3.9
ORlibtifflibtiffMatch3.9.0
ORlibtifflibtiffMatch3.9.0beta
ORlibtifflibtiffMatch3.9.1
ORlibtifflibtiffMatch3.9.2
ORlibtifflibtiffMatch3.9.2-5.2.1
ORlibtifflibtiffMatch3.9.3
ORlibtifflibtiffMatch3.9.4
ORlibtifflibtiffMatch3.9.5
ORlibtifflibtiffMatch4.0
ORlibtifflibtiffMatch4.0alpha
ORlibtifflibtiffMatch4.0beta1
ORlibtifflibtiffMatch4.0beta2
ORlibtifflibtiffMatch4.0beta3
ORlibtifflibtiffMatch4.0beta4
ORlibtifflibtiffMatch4.0beta5
ORlibtifflibtiffMatch4.0beta6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| libtiff | libtiff | 3.9.1 | cpe:/a:libtiff:libtiff:3.9.1::: |
| libtiff | libtiff | 3.9.2-5.2.1 | cpe:/a:libtiff:libtiff:3.9.2-5.2.1::: |
| libtiff | libtiff | 4.0 | cpe:/a:libtiff:libtiff:4.0:beta1:: |
| libtiff | libtiff | cpe:/a:libtiff:libtiff:::: | |
| libtiff | libtiff | 3.6.1 | cpe:/a:libtiff:libtiff:3.6.1::: |
| libtiff | libtiff | 4.0 | cpe:/a:libtiff:libtiff:4.0:beta5:: |
| libtiff | libtiff | 3.5.2 | cpe:/a:libtiff:libtiff:3.5.2::: |
| libtiff | libtiff | 3.5.7 | cpe:/a:libtiff:libtiff:3.5.7:beta:: |
| libtiff | libtiff | 3.6.0 | cpe:/a:libtiff:libtiff:3.6.0:beta:: |
| libtiff | libtiff | 3.7.0 | cpe:/a:libtiff:libtiff:3.7.0:beta:: |
References
lists.opensuse.org/opensuse-updates/2013-01/msg00076.html
rhn.redhat.com/errata/RHSA-2012-1590.html
secunia.com/advisories/51491
www.debian.org/security/2012/dsa-2589
www.openwall.com/lists/oss-security/2012/11/28/1
www.securityfocus.com/bid/56715
www.ubuntu.com/usn/USN-1655-1
bugzilla.redhat.com/show_bug.cgi?id=867235
exchange.xforce.ibmcloud.com/vulnerabilities/80339
Related
prion
prion
Stack overflow
2013-01-04 22:55:00
cvelist
cvelist
CVE-2012-5581
2013-01-04 22:00:00
nessus
nessus
Mandriva Linux Security Advisory : libtiff (MDVSA-2012:184)
2012-12-28 00:00:00
Oracle Solaris Third-Party Patch Update : libtiff (cve_2012_5581_denial_of)
2015-01-19 00:00:00
ubuntu
ubuntu
LibTIFF vulnerability
2012-12-05 00:00:00
openvas
openvas
Mandriva Update for libtiff MDVSA-2012:184 (libtiff)
2012-12-31 00:00:00
Debian: Security Advisory (DSA-2589-1)
2013-09-18 00:00:00
Ubuntu: Security Advisory (USN-1655-1)
2012-12-06 00:00:00
securityvulns
securityvulns
libtiff library DoS
2012-12-07 00:00:00
[USN-1655-1] LibTIFF vulnerability
2012-12-07 00:00:00
debian
debian
[SECURITY] [DSA 2589-1] tiff security update
2012-12-16 16:04:53
debiancve
debiancve
CVE-2012-5581
2013-01-04 22:55:02
nvd
nvd
CVE-2012-5581
2013-01-04 22:55:02
ubuntucve
ubuntucve
CVE-2012-5581
2012-11-28 00:00:00
veracode
veracode
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:00
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:00
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:00
oraclelinux
oraclelinux
libtiff security update
2012-12-18 00:00:00
redhat
redhat
(RHSA-2012:1590) Moderate: libtiff security update
2012-12-18 00:00:00
centos
centos
libtiff security update
2012-12-19 01:20:39
fedora
fedora
[SECURITY] Fedora 18 Update: libtiff-4.0.3-2.fc18
2013-01-12 00:28:00
[SECURITY] Fedora 18 Update: libtiff-4.0.3-6.fc18
2013-05-14 01:23:41
[SECURITY] Fedora 17 Update: libtiff-3.9.7-1.fc17
2012-12-31 03:28:09
amazon
amazon
Medium: libtiff
2012-12-20 13:55:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.037
Percentile
91.8%
Related for CVE-2012-5581