Lucene search

[email protected]NVD:CVE-2012-2113

HistoryJul 22, 2012 - 5:55 p.m.

CVE-2012-2113

2012-07-2217:55:01

CWE-189

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%

JSON

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

Affected configurations

NVD

Node

libtifflibtiffRange≤4.0.1

libtifflibtiffMatch3.4

libtifflibtiffMatch3.4beta18

libtifflibtiffMatch3.4beta24

libtifflibtiffMatch3.4beta28

libtifflibtiffMatch3.4beta29

libtifflibtiffMatch3.4beta31

libtifflibtiffMatch3.4beta32

libtifflibtiffMatch3.4beta34

libtifflibtiffMatch3.4beta35

libtifflibtiffMatch3.4beta36

libtifflibtiffMatch3.4beta37

libtifflibtiffMatch3.5.1

libtifflibtiffMatch3.5.2

libtifflibtiffMatch3.5.3

libtifflibtiffMatch3.5.4

libtifflibtiffMatch3.5.5

libtifflibtiffMatch3.5.6

libtifflibtiffMatch3.5.6beta

libtifflibtiffMatch3.5.7

libtifflibtiffMatch3.5.7alpha

libtifflibtiffMatch3.5.7alpha2

libtifflibtiffMatch3.5.7alpha3

libtifflibtiffMatch3.5.7alpha4

libtifflibtiffMatch3.5.7beta

libtifflibtiffMatch3.6.0

libtifflibtiffMatch3.6.0beta

libtifflibtiffMatch3.6.0beta2

libtifflibtiffMatch3.6.1

libtifflibtiffMatch3.7.0

libtifflibtiffMatch3.7.0alpha

libtifflibtiffMatch3.7.0beta

libtifflibtiffMatch3.7.0beta2

libtifflibtiffMatch3.7.1

libtifflibtiffMatch3.7.2

libtifflibtiffMatch3.7.3

libtifflibtiffMatch3.7.4

libtifflibtiffMatch3.8.0

libtifflibtiffMatch3.8.1

libtifflibtiffMatch3.8.2

libtifflibtiffMatch3.9

libtifflibtiffMatch3.9.0

libtifflibtiffMatch3.9.0beta

libtifflibtiffMatch3.9.1

libtifflibtiffMatch3.9.2

libtifflibtiffMatch3.9.2-5.2.1

libtifflibtiffMatch3.9.3

libtifflibtiffMatch3.9.4

libtifflibtiffMatch3.9.5

libtifflibtiffMatch4.0alpha

libtifflibtiffMatch4.0beta1

libtifflibtiffMatch4.0beta2

libtifflibtiffMatch4.0beta3

libtifflibtiffMatch4.0beta4

libtifflibtiffMatch4.0beta5

libtifflibtiffMatch4.0beta6

References

lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html

rhn.redhat.com/errata/RHSA-2012-1054.html

secunia.com/advisories/49493

secunia.com/advisories/49686

secunia.com/advisories/50726

security.gentoo.org/glsa/glsa-201209-02.xml

www.debian.org/security/2012/dsa-2552

www.mandriva.com/security/advisories?name=MDVSA-2012:101

www.remotesensing.org/libtiff/v4.0.2.html

www.securityfocus.com/bid/54076

bugzilla.redhat.com/show_bug.cgi?id=810551

hermes.opensuse.org/messages/15083566

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%

JSON

Related for NVD:CVE-2012-2113

cve1 cvelist1 prion1 debiancve1 ubuntucve1 nessus17 openvas33 ubuntu1 securityvulns2 amazon1 veracode1 suse1 centos1 oraclelinux1 fedora7 redhat1 altlinux1 debian1 osv1 slackware1 gentoo1