NVD

Id
8136  
Name
CVE-2011-1167  
Description
Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-03-28  
Modified Date
2014-02-20  
Seq
2011-1167  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46669 8136 CVE-2011-1167 http://blackberry.com/btsc/KB27244  View
46670 8136 CVE-2011-1167 http://bugzilla.maptools.org/show_bug.cgi?id=2300  View
46671 8136 CVE-2011-1167 APPLE-SA-2012-02-01-1  View
46672 8136 CVE-2011-1167 APPLE-SA-2012-05-09-1  View
46673 8136 CVE-2011-1167 APPLE-SA-2012-09-19-1  View
46674 8136 CVE-2011-1167 FEDORA-2011-3836  View
46675 8136 CVE-2011-1167 FEDORA-2011-3827  View
46676 8136 CVE-2011-1167 SUSE-SR:2011:009  View
46677 8136 CVE-2011-1167 GLSA-201209-02  View
46678 8136 CVE-2011-1167 8165  View
46679 8136 CVE-2011-1167 SSA:2011-098-01  View
46680 8136 CVE-2011-1167 http://support.apple.com/kb/HT5130  View
46681 8136 CVE-2011-1167 http://support.apple.com/kb/HT5281  View
46682 8136 CVE-2011-1167 http://support.apple.com/kb/HT5503  View
46683 8136 CVE-2011-1167 USN-1102-1  View
46684 8136 CVE-2011-1167 DSA-2210  View
46685 8136 CVE-2011-1167 MDVSA-2011:064  View
46686 8136 CVE-2011-1167 RHSA-2011:0392  View
46687 8136 CVE-2011-1167 20110321 ZDI-11-107: Libtiff ThunderCode Decoder THUNDER_2BITDELTAS Remote Code Execution Vulnerability  View
46688 8136 CVE-2011-1167 46951  View
46689 8136 CVE-2011-1167 1025257  View
46690 8136 CVE-2011-1167 ADV-2011-0795  View
46691 8136 CVE-2011-1167 ADV-2011-0845  View
46692 8136 CVE-2011-1167 ADV-2011-0859  View
46693 8136 CVE-2011-1167 ADV-2011-0860  View
46694 8136 CVE-2011-1167 ADV-2011-0905  View
46695 8136 CVE-2011-1167 ADV-2011-0930  View
46696 8136 CVE-2011-1167 ADV-2011-0960  View
46697 8136 CVE-2011-1167 http://www.zerodayinitiative.com/advisories/ZDI-11-107  View
46698 8136 CVE-2011-1167 libtiff-thundercode-decoder-bo(66247)  View
46699 8136 CVE-2011-1167 https://bugzilla.redhat.com/show_bug.cgi?id=684939  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31197 JVNDB-2011-001437 LibTIFF の Thunder デコーダにおけるヒープベースのバッファオーバーフローの脆弱性 LibTIFF の tif_thunder.c 内にある Thunder デコーダには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-1167 49074 CVE-2011-1167 8136 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001437.html 2011-03-28 2013-01-31 View