NVD

Id
39871  
Name
CVE-2013-4231  
Description
Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2014-01-19  
Modified Date
2016-12-30  
Seq
2013-4231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202779 39871 CVE-2013-4231 http://bugzilla.maptools.org/show_bug.cgi?id=2450  View
202780 39871 CVE-2013-4231 RHSA-2014:0223  View
202781 39871 CVE-2013-4231 [tiff] 20130801 Vulnerabilities in libtiff 4.0.3  View
202782 39871 CVE-2013-4231 DSA-2744  View
202783 39871 CVE-2013-4231 [oss-security] 20130809 Re: CVE Request -- Four (stack-based) buffer overflows and one use-after-free in libtiff v4.0.3 reported by Pedro Ribeiro  View
202784 39871 CVE-2013-4231 61695  View
202785 39871 CVE-2013-4231 https://bugzilla.redhat.com/show_bug.cgi?id=995965  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24285 JVNDB-2013-005860 libtiff におけるバッファオーバーフローの脆弱性 libtiff には、バッファオーバーフローの脆弱性が存在します。 CVE-2013-4231 64173 CVE-2013-4231 39871 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005860.html 2013-08-13 2014-03-06 View