NVD

Id
44998  
Name
CVE-2012-3401  
Description
The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-13  
Modified Date
2013-05-29  
Seq
2012-3401  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225449 44998 CVE-2012-3401 http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830  View
225450 44998 CVE-2012-3401 openSUSE-SU-2012:0955  View
225451 44998 CVE-2012-3401 RHSA-2012:1590  View
225452 44998 CVE-2012-3401 GLSA-201209-02  View
225453 44998 CVE-2012-3401 DSA-2552  View
225454 44998 CVE-2012-3401 MDVSA-2012:127  View
225455 44998 CVE-2012-3401 [oss-security] 20120719 tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer  View
225456 44998 CVE-2012-3401 [oss-security] 20120719 Re: tiff2pdf: Heap-based buffer overflow due to improper initialization of T2P context struct pointer  View
225457 44998 CVE-2012-3401 54601  View
225458 44998 CVE-2012-3401 USN-1511-1  View
225459 44998 CVE-2012-3401 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
225460 44998 CVE-2012-3401 libtiff-t2preadtiffinit-bo(77088)  View
225461 44998 CVE-2012-3401 https://bugzilla.redhat.com/attachment.cgi?id=596457  View
225462 44998 CVE-2012-3401 https://bugzilla.redhat.com/show_bug.cgi?id=837577  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27871 JVNDB-2012-003578 LibTIFF の tiff2pdf におけるサービス運用妨害 (クラッシュ) の脆弱性 LibTIFF の tiff2pdf (tools/tiff2pdf.c) 内の t2p_read_tiff_init 関数は、特定のエラーが発生する状況において、T2P コンテキストの構造体ポインタを適切に初期化しないため、サービス運用妨害 (クラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2012-3401 56639 CVE-2012-3401 44998 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003578.html 2012-08-13 2013-06-11 View