NVD

Id
45940  
Name
CVE-2012-4564  
Description
ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-11  
Modified Date
2013-02-07  
Seq
2012-4564  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230839 45940 CVE-2012-4564 openSUSE-SU-2013:0187  View
230840 45940 CVE-2012-4564 RHSA-2012:1590  View
230841 45940 CVE-2012-4564 DSA-2575  View
230842 45940 CVE-2012-4564 [oss-security] 20121102 libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file  View
230843 45940 CVE-2012-4564 [oss-security] 20121102 Re: libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file  View
230844 45940 CVE-2012-4564 56372  View
230845 45940 CVE-2012-4564 USN-1631-1  View
230846 45940 CVE-2012-4564 libtiff-ppm2tiff-bo(79750)  View
230847 45940 CVE-2012-4564 https://bugzilla.redhat.com/show_bug.cgi?id=871700  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29609 JVNDB-2012-005316 ppm2tiff におけるサービス運用妨害 (DoS) の脆弱性 ppm2tiff は、TIFFScanlineSize 関数の戻り値をチェックしないため、サービス運用妨害 (クラッシュ) 状態になる、および任意のコードを実行される脆弱性が存在します。 CVE-2012-4564 57802 CVE-2012-4564 45940 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005316.html 2012-11-11 2014-01-09 View