PT-2012-1118 · Libtiff+3 · Libtiff+3

Huzaifa Sidhpurwala + 1 · Published 2012-07-29 · Updated 2024-06-15 · CVE-2012-3401

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libTIFF versions 4.0.2 and earlier

Description The issue is related to the t2p read tiff init function in tiff2pdf (tools/tiff2pdf.c) which does not properly initialize the T2P context struct pointer in certain error conditions. This allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow. The vulnerability can be exploited remotely.

Recommendations For libTIFF versions 4.0.2 and earlier, consider disabling the t2p read tiff init function until a patch is available to prevent potential exploitation. Restrict access to the tiff2pdf tool to minimize the risk of exploitation. Avoid using the tiff2pdf tool with untrusted TIFF images until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-189

Related Identifiers

BDU:2015-09646

CESA-2012_1590

CVE-2012-3401

DSA-2552-1

OPENSUSE-SU-2024:10554-1

RHSA-2012:1590

RHSA-2012_1590

SUSE-SU-2012_0919-1

Affected Products

Centos

Red Hat

Suse

Libtiff

References · 97

• https://bdu.fstec.ru/vul/2015-09646 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4564 · Security Note
• https://osv.dev/vulnerability/CVE-2012-3401 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3401 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-1590.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09718 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-3401 · Security Note
• http://secunia.com/advisories/49938 · Vendor Advisory
• http://debian.org/security/2012/dsa-2552 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3401 · Security Note
• http://security.gentoo.org/glsa/glsa-201209-02.xml · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10554-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4447 · Security Note
• http://ubuntu.com/usn/USN-1511-1 · Vendor Advisory
• http://secunia.com/advisories/50007 · Vendor Advisory