PRIOn knowledge basePRION:CVE-2013-1961Stack overflow
7.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.027 Low
EPSS
Percentile
90.3%
Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libtiff | eq | 3.9.0 beta | |
| libtiff | eq | 3.7.3 | |
| libtiff | eq | 3.5.1 | |
| libtiff | eq | 3.4 beta18 | |
| libtiff | eq | 4.0.0 | |
| libtiff | eq | 3.4 beta34 | |
| libtiff | eq | 3.4 beta31 | |
| libtiff | eq | 3.5.6 | |
| libtiff | eq | 3.7.4 | |
| libtiff | eq | 3.5.7 alpha |
References
lists.opensuse.org/opensuse-updates/2013-06/msg00058.html
lists.opensuse.org/opensuse-updates/2013-06/msg00080.html
rhn.redhat.com/errata/RHSA-2014-0223.html
seclists.org/oss-sec/2013/q2/254
secunia.com/advisories/53237
secunia.com/advisories/53765
www.debian.org/security/2013/dsa-2698
www.securityfocus.com/bid/59607
bugzilla.redhat.com/show_bug.cgi?id=952131
lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html
Related
7.3 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.027 Low
EPSS
Percentile
90.3%