PT-2011-1184 · Libtiff+1 · Libtiff+1

Vincent Danen · Published 2011-03-21 · Updated 2024-06-15 · CVE-2011-1167

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibTIFF versions 3.9.4 and earlier

Description The issue is related to a heap-based buffer overflow in the Thunder decoder, which can be exploited by remote attackers through crafted THUNDER 2BITDELTAS data in a .tiff file with an unexpected BitsPerSample value, potentially allowing the execution of arbitrary code. Multiple vulnerabilities in the tiff package may lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations For LibTIFF versions 3.9.4 and earlier, update to a version later than 3.9.4 to resolve the issue. As a temporary workaround, consider restricting the use of the Thunder decoder in tif thunder.c to minimize the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-189

Related Identifiers

BDU:2015-09646

CVE-2011-1167

DSA-2210-1

OPENSUSE-SU-2024:10554-1

RHSA-2011:0392

RHSA-2011_0392

ZDI-11-107

Affected Products

Libtiff

Red Hat

References · 98

• https://bdu.fstec.ru/vul/2015-09646 · Security Note
• http://debian.org/security/2011/dsa-2210 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html · Vendor Advisory
• http://ubuntu.com/usn/usn-1102-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1167 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201209-02.xml · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10554-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0392.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0392.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1167 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html · Vendor Advisory