CVE-2013-4232

EUVD-2013-4136
Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
libtifflibtiff
4.0.3
debiandebian_linux
6.0
debiandebian_linux
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tiff
bookworm
4.5.0-6+deb12u1
fixed
bookworm (security)
4.5.0-6+deb12u1
fixed
bullseye
4.2.0-1+deb11u5
fixed
bullseye (security)
4.2.0-1+deb11u5
fixed
sid
4.5.1+git230720-5
fixed
trixie
4.5.1+git230720-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tiff
lucid
Fixed 3.9.2-2ubuntu0.14
released
precise
Fixed 3.9.5-2ubuntu1.6
released
quantal
Fixed 4.0.2-1ubuntu2.3
released
raring
ignored
saucy
Fixed 4.0.2-4ubuntu3.1
released
trusty
not-affected
tiff3
lucid
dne
precise
dne
quantal
not-affected
raring
not-affected
saucy
not-affected
trusty
dne
Common Weakness Enumeration
References
http://bugzilla.maptools.org/show_bug.cgi?id=2449
http://rhn.redhat.com/errata/RHSA-2014-0223.html
http://secunia.com/advisories/54543
http://secunia.com/advisories/54628
http://www.asmail.be/msg0055359936.html
http://www.debian.org/security/2013/dsa-2744
http://www.openwall.com/lists/oss-security/2013/08/10/2
https://bugzilla.redhat.com/show_bug.cgi?id=995975
http://bugzilla.maptools.org/show_bug.cgi?id=2449
http://rhn.redhat.com/errata/RHSA-2014-0223.html
http://secunia.com/advisories/54543
http://secunia.com/advisories/54628
http://www.asmail.be/msg0055359936.html
http://www.debian.org/security/2013/dsa-2744
http://www.openwall.com/lists/oss-security/2013/08/10/2
https://bugzilla.redhat.com/show_bug.cgi?id=995975