Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1631-1
HistoryNov 15, 2012 - 12:00 a.m.

LibTIFF vulnerabilities

2012-11-1500:00:00
ubuntu.com
28

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON

Releases

  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 11.10
  • Ubuntu 10.04
  • Ubuntu 8.04

Packages

  • tiff - Tag Image File Format (TIFF) library

Details

It was discovered that LibTIFF incorrectly handled certain malformed images
using the PixarLog compression format. If a user or automated system were
tricked into opening a specially crafted TIFF image, a remote attacker
could crash the application, leading to a denial of service, or possibly
execute arbitrary code with user privileges. (CVE-2012-4447)

Huzaifa S. Sidhpurwala discovered that the ppm2tiff tool incorrectly
handled certain malformed PPM images. If a user or automated system were
tricked into opening a specially crafted PPM image, a remote attacker could
crash the application, leading to a denial of service, or possibly execute
arbitrary code with user privileges. (CVE-2012-4564)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibtiff4< 3.8.2-7ubuntu3.14UNKNOWN
Ubuntu8.04noarchlibtiff-opengl< 3.8.2-7ubuntu3.14UNKNOWN
Ubuntu8.04noarchlibtiff-tools< 3.8.2-7ubuntu3.14UNKNOWN
Ubuntu8.04noarchlibtiff4-dev< 3.8.2-7ubuntu3.14UNKNOWN
Ubuntu8.04noarchlibtiffxx0c2< 3.8.2-7ubuntu3.14UNKNOWN
Ubuntu12.10noarchlibtiff5< 4.0.2-1ubuntu2.1UNKNOWN
Ubuntu12.10noarchlibtiff-opengl< 4.0.2-1ubuntu2.1UNKNOWN
Ubuntu12.10noarchlibtiff-tools< 4.0.2-1ubuntu2.1UNKNOWN
Ubuntu12.10noarchlibtiff5-alt-dev< 4.0.2-1ubuntu2.1UNKNOWN
Ubuntu12.10noarchlibtiff5-dev< 4.0.2-1ubuntu2.1UNKNOWN
Rows per page:
1-10 of 261

Related

openvas 34
securityvulns 2
nessus 21
fedora 9
amazon 1
veracode 3
redhat 1
oraclelinux 1
centos 1
ubuntucve 2
prion 2
debiancve 2
cve 2
debian 2
osv 1
gentoo 1
slackware 1
altlinux 1
openvas
openvas
Mandriva Update for libtiff MDVSA-2012:174 (libtiff)
2012-11-23 00:00:00
Ubuntu: Security Advisory (USN-1631-1)
2012-11-19 00:00:00
Mandriva Update for libtiff MDVSA-2012:174 (libtiff)
2012-11-23 00:00:00
securityvulns
securityvulns
libtiff buffer overflow
2012-11-18 00:00:00
[SECURITY] [DSA 2561-1] tiff security update
2012-10-28 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : libtiff (MDVSA-2012:174)
2012-11-23 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : tiff vulnerabilities (USN-1631-1)
2012-11-16 00:00:00
openSUSE Security Update : tiff (openSUSE-2013-29)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: libtiff-4.0.3-2.fc18
2013-01-12 00:28:00
[SECURITY] Fedora 18 Update: libtiff-4.0.3-6.fc18
2013-05-14 01:23:41
[SECURITY] Fedora 17 Update: libtiff-3.9.7-1.fc17
2012-12-31 03:28:09
amazon
amazon
Medium: libtiff
2012-12-20 13:55:00
veracode
veracode
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:00
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:00
Denial Of Service (DoS) And Remote Code Execution (RCE)
2019-05-02 04:42:00
redhat
redhat
(RHSA-2012:1590) Moderate: libtiff security update
2012-12-18 00:00:00
oraclelinux
oraclelinux
libtiff security update
2012-12-18 00:00:00
centos
centos
libtiff security update
2012-12-19 01:20:39
ubuntucve
ubuntucve
CVE-2012-4564
2012-11-11 00:00:00
CVE-2012-4447
2012-10-28 00:00:00
prion
prion
Integer overflow
2012-11-11 13:00:00
Heap overflow
2012-10-28 15:55:00
debiancve
debiancve
CVE-2012-4564
2012-11-11 13:00:00
CVE-2012-4447
2012-10-28 15:55:00
cve
cve
CVE-2012-4564
2012-11-11 13:00:00
CVE-2012-4447
2012-10-28 15:55:00
debian
debian
[SECURITY] [DSA 2575-1] tiff security update
2012-11-18 14:22:07
[SECURITY] [DSA 2561-1] tiff security update
2012-10-21 16:03:07
osv
osv
tiff - buffer overflow
2012-10-21 00:00:00
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2014-02-21 00:00:00
slackware
slackware
[slackware-security] libtiff
2013-10-18 19:38:32
altlinux
altlinux
Security fix for the ALT Linux 10 package libtiff version 4.0.10.0.57.f9fc01c3-alt1
2019-04-09 00:00:00

9.3 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.044 Low

EPSS

Percentile

92.3%

JSON
Related for USN-1631-1
openvas34securityvulns2nessus21fedora9amazon1veracode3redhat1oraclelinux1centos1ubuntucve2prion2debiancve2cve2debian2osv1gentoo1slackware1altlinux1