NVD

Id
39872  
Name
CVE-2013-4232  
Description
Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possible execute arbitrary code via a crafted TIFF image.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-10  
Modified Date
2014-03-05  
Seq
2013-4232  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202786 39872 CVE-2013-4232 http://bugzilla.maptools.org/show_bug.cgi?id=2449  View
202787 39872 CVE-2013-4232 RHSA-2014:0223  View
202788 39872 CVE-2013-4232 [tiff] 20130801 Vulnerabilities in libtiff 4.0.3  View
202789 39872 CVE-2013-4232 DSA-2744  View
202790 39872 CVE-2013-4232 [oss-security] 20130809 Re: CVE Request -- Four (stack-based) buffer overflows and one use-after-free in libtiff v4.0.3 reported by Pedro Ribeiro  View
202791 39872 CVE-2013-4232 https://bugzilla.redhat.com/show_bug.cgi?id=995975  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22442 JVNDB-2013-004017 Libtiff の tools/tiff2pdf.c の t2p_readwrite_pdf_image 関数におけるサービス運用妨害 (DoS) の脆弱性 Libtiff の tools/tiff2pdf.c の t2p_readwrite_pdf_image 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (クラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2013-4232 64174 CVE-2013-4232 39872 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004017.html 2013-08-27 2014-03-06 View