PT-2014-8419 · Libtiff+3 · Libtiff+4

Publicado

2014-12-31

·

Atualizado

2024-06-15

·

CVE-2014-8128

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 4.0.4 Apple iOS versions prior to 8.4 OS X versions prior to 10.10.4
Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds write, via a crafted TIFF image. This can be exploited by sending a maliciously crafted image to affected devices.
Recommendations For LibTIFF versions prior to 4.0.4, update to version 4.0.4 or later. For Apple iOS versions prior to 8.4, update to iOS 8.4 or later. For OS X versions prior to 10.10.4, update to OS X 10.10.4 or later.

Exploit

Correção

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2014-8128
DLA-221-1
DLA-610-1
DLA-693-1
DSA-3273-1
MGASA-2015-0112
MGASA-2017-0199
OPENSUSE-SU-2018_0097-1
OPENSUSE-SU-2024:10554-1
SUSE-SU-2015:1420-1
SUSE-SU-2015:1475-1
SUSE-SU-2018:0073-1
SUSE-SU-2018:1835-1
SUSE-SU-2018_0073-1
SUSE-SU-2018_1835-1
USN-2553-1
USN-2553-2

Produtos afetados

Libtiff
Os X
Suse
Ubuntu
Ios