LibTIFF - 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability

2010-08-07T00:00:00
ID EDB-ID:14573
Type exploitdb
Reporter Tomas Hoger
Modified 2010-08-07T00:00:00

Description

LibTIFF - 'td_stripbytecount' NULL Pointer Dereference Remote Denial of Service Vulnerability. CVE-2010-2482. Dos exploit for linux platform

                                        
                                            From: http://www.securityfocus.com/bid/41480/
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.

Versions up to and including libTIFF 3.9.4 are vulnerable. 

PoC:
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/14573.tif.gz (lp589145-sample.tif.gz)