NVD

Id
43180  
Name
CVE-2012-1173  
Description
Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-04  
Modified Date
2013-05-14  
Seq
2012-1173  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
217400 43180 CVE-2012-1173 http://bugzilla.maptools.org/attachment.cgi?id=477&action=diff  View
217401 43180 CVE-2012-1173 http://bugzilla.maptools.org/show_bug.cgi?id=2369  View
217402 43180 CVE-2012-1173 http://home.gdal.org/private/zdi-can-1221/zdi-can-1221.txt  View
217403 43180 CVE-2012-1173 APPLE-SA-2012-09-19-1  View
217404 43180 CVE-2012-1173 APPLE-SA-2012-09-19-2  View
217405 43180 CVE-2012-1173 FEDORA-2012-5463  View
217406 43180 CVE-2012-1173 FEDORA-2012-5406  View
217407 43180 CVE-2012-1173 FEDORA-2012-5410  View
217408 43180 CVE-2012-1173 RHSA-2012:0468  View
217409 43180 CVE-2012-1173 GLSA-201209-02  View
217410 43180 CVE-2012-1173 http://support.apple.com/kb/HT5501  View
217411 43180 CVE-2012-1173 http://support.apple.com/kb/HT5503  View
217412 43180 CVE-2012-1173 USN-1416-1  View
217413 43180 CVE-2012-1173 DSA-2447  View
217414 43180 CVE-2012-1173 52891  View
217415 43180 CVE-2012-1173 1026895  View
217416 43180 CVE-2012-1173 libtiff-gttileseparate-bo(74656)  View
217417 43180 CVE-2012-1173 https://downloads.avaya.com/css/P8/documents/100161772  View
217418 43180 CVE-2012-1173 openSUSE-SU-2012:0539  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26900 JVNDB-2012-002607 LibTIFF の tiff_getimage.c における整数オーバーフローの脆弱性 LibTIFF の tiff_getimage.c には、整数オーバーフローの脆弱性が存在します。 CVE-2012-1173 54411 CVE-2012-1173 43180 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002607.html 2012-06-04 2014-02-04 View