PT-2004-1065 · Libtiff+1 · Libtiff+1

Infamous41Md

·

Publicado

2004-12-22

·

Atualizado

2017-10-11

·

CVE-2004-1308

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libtiff versions 3.5.5 through 3.7.0
Description The issue allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF ASCII or TIFF UNDEFINED directory entry with a -1 entry count, leading to a heap-based buffer overflow. This can result in disruption of confidentiality, integrity, and availability of protected information. The exploitation of these issues can be done remotely.
Recommendations For libtiff versions 3.5.5 through 3.7.0, update to a version that contains a fix for this issue to prevent remote code execution and protect against potential disruptions to confidentiality, integrity, and availability of protected information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-06336
BDU:2015-06341
CVE-2004-1308
DSA-617-1
RHSA-2005:019
RHSA-2005:021
RHSA-2005:035
RHSA-2005_019
RHSA-2005_021
RHSA-2005_035

Produtos afetados

Red Hat
Libtiff