CVE-2013-1960

Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
remotesensinglibtiff
𝑥
≤ 4.0.3
remotesensinglibtiff
3.4
remotesensinglibtiff
3.4:beta18
remotesensinglibtiff
3.4:beta24
remotesensinglibtiff
3.4:beta28
remotesensinglibtiff
3.4:beta29
remotesensinglibtiff
3.4:beta31
remotesensinglibtiff
3.4:beta32
remotesensinglibtiff
3.4:beta34
remotesensinglibtiff
3.4:beta35
remotesensinglibtiff
3.4:beta36
remotesensinglibtiff
3.4:beta37
remotesensinglibtiff
3.5.1
remotesensinglibtiff
3.5.2
remotesensinglibtiff
3.5.3
remotesensinglibtiff
3.5.4
remotesensinglibtiff
3.5.5
remotesensinglibtiff
3.5.6
remotesensinglibtiff
3.5.6:beta
remotesensinglibtiff
3.5.7
remotesensinglibtiff
3.5.7:alpha
remotesensinglibtiff
3.5.7:alpha2
remotesensinglibtiff
3.5.7:alpha3
remotesensinglibtiff
3.5.7:alpha4
remotesensinglibtiff
3.5.7:beta
remotesensinglibtiff
3.6.0
remotesensinglibtiff
3.6.0:beta
remotesensinglibtiff
3.6.0:beta2
remotesensinglibtiff
3.6.1
remotesensinglibtiff
3.7.0
remotesensinglibtiff
3.7.0:alpha
remotesensinglibtiff
3.7.0:beta
remotesensinglibtiff
3.7.0:beta2
remotesensinglibtiff
3.7.1
remotesensinglibtiff
3.7.2
remotesensinglibtiff
3.7.3
remotesensinglibtiff
3.7.4
remotesensinglibtiff
3.8.0
remotesensinglibtiff
3.8.1
remotesensinglibtiff
3.8.2
remotesensinglibtiff
3.9.0
remotesensinglibtiff
3.9.0:beta
remotesensinglibtiff
3.9.1
remotesensinglibtiff
3.9.2
remotesensinglibtiff
3.9.3
remotesensinglibtiff
3.9.4
remotesensinglibtiff
4.0.0
remotesensinglibtiff
4.0.1
remotesensinglibtiff
4.0.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tiff
bullseye (security)
4.2.0-1+deb11u5
fixed
bullseye
4.2.0-1+deb11u5
fixed
bookworm
4.5.0-6+deb12u1
fixed
bookworm (security)
4.5.0-6+deb12u1
fixed
sid
4.5.1+git230720-5
fixed
trixie
4.5.1+git230720-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tiff
trusty
Fixed 4.0.2-4ubuntu3
released
saucy
Fixed 4.0.2-4ubuntu3
released
raring
Fixed 4.0.2-4ubuntu2.1
released
quantal
Fixed 4.0.2-1ubuntu2.2
released
precise
Fixed 3.9.5-2ubuntu1.5
released
oneiric
ignored
lucid
Fixed 3.9.2-2ubuntu0.13
released
hardy
ignored
tiff3
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
dne
oneiric
dne
lucid
dne
hardy
dne