Lucene search

K
debianDebianDEBIAN:C5BF0622138E3C97DBA485F7033E0B51:93BF7
HistoryJul 01, 2014 - 6:01 p.m.

tiff security update

2014-07-0118:01:35
lists.debian.org
7

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

90.6%

Package : tiff
Version : 3.9.4-5+squeeze11
CVE ID : CVE-2013-4243
Debian Bug : #742917

Murray McAllister discovered a heap-based buffer overflow in the gif2tiff
command line tool. Executing gif2tiff on a malicious tiff image could
result in arbitrary code execution.

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

90.6%