PT-2018-3328 · Libtiff+1 · Libtiff+1

Cheng Wen

·

Publicado

2018-09-18

·

Atualizado

2024-06-15

·

CVE-2018-17795

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: LibTIFF versions 4.0.9 and earlier
Description: The issue is related to a heap-based buffer overflow in the t2p write pdf function, located in tiff2pdf.c, which can be triggered by a crafted TIFF file. This can cause a denial of service, leading to an application crash, and potentially have other unspecified impacts.
Recommendations: For LibTIFF versions 4.0.9 and earlier, consider disabling the t2p write pdf function until a patch is available to prevent potential exploitation via crafted TIFF files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-787

Identificadores relacionados

BDU:2019-04831
CVE-2018-17795
OPENSUSE-SU-2018_3370-1
OPENSUSE-SU-2018_3371-1
OPENSUSE-SU-2024:11461-1
SUSE-SU-2018:3289-1
SUSE-SU-2018:3327-1
SUSE-SU-2018:3391-1

Produtos afetados

Libtiff
Suse