CVE-2012-2113
libtiff: integer overflow in tiff2pdf leading to heap-buffer overflow when reading a tiled tiff file
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Múltiples desbordamientos de enteros en tiff2pdf en libtiff anterior a v4.0.2 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de una elaborada imagen TIFF, lo que provoca un desbordamiento de búfer basado en memoria dinámica
New libtiff packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Related CVE Numbers: CVE-2012-2088,CVE-2012-2113,CVE-2012-4447,CVE-2012-4564,CVE-2013-1960,CVE-2013-1961,CVE-2013-4231,CVE-2013-4232,CVE-2013-4244.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-04-04 CVE Reserved
- 2012-07-22 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-122: Heap-based Buffer Overflow
- CWE-189: Numeric Errors
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/50726 | Third Party Advisory | |
| http://www.remotesensing.org/libtiff/v4.0.2.html | X_refsource_confirm | |
| http://www.securityfocus.com/bid/54076 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00010.html | 2023-02-13 | |
| http://rhn.redhat.com/errata/RHSA-2012-1054.html | 2023-02-13 | |
| http://secunia.com/advisories/49493 | 2023-02-13 | |
| http://secunia.com/advisories/49686 | 2023-02-13 | |
| http://security.gentoo.org/glsa/glsa-201209-02.xml | 2023-02-13 | |
| http://www.debian.org/security/2012/dsa-2552 | 2023-02-13 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2012:101 | 2023-02-13 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=810551 | 2012-07-03 | |
| https://hermes.opensuse.org/messages/15083566 | 2023-02-13 | |
| https://access.redhat.com/security/cve/CVE-2012-2113 | 2012-07-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | <= 4.0.1 Search vendor "Libtiff" for product "Libtiff" and version " <= 4.0.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta18 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta24 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta28 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta29 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta31 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta32 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta34 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta35 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta36 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.4 Search vendor "Libtiff" for product "Libtiff" and version "3.4" | beta37 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.1 Search vendor "Libtiff" for product "Libtiff" and version "3.5.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.2 Search vendor "Libtiff" for product "Libtiff" and version "3.5.2" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.3 Search vendor "Libtiff" for product "Libtiff" and version "3.5.3" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.4 Search vendor "Libtiff" for product "Libtiff" and version "3.5.4" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.5 Search vendor "Libtiff" for product "Libtiff" and version "3.5.5" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.6 Search vendor "Libtiff" for product "Libtiff" and version "3.5.6" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.6 Search vendor "Libtiff" for product "Libtiff" and version "3.5.6" | beta |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.7 Search vendor "Libtiff" for product "Libtiff" and version "3.5.7" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.7 Search vendor "Libtiff" for product "Libtiff" and version "3.5.7" | alpha |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.7 Search vendor "Libtiff" for product "Libtiff" and version "3.5.7" | alpha2 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.7 Search vendor "Libtiff" for product "Libtiff" and version "3.5.7" | alpha3 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.7 Search vendor "Libtiff" for product "Libtiff" and version "3.5.7" | alpha4 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.5.7 Search vendor "Libtiff" for product "Libtiff" and version "3.5.7" | beta |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.6.0 Search vendor "Libtiff" for product "Libtiff" and version "3.6.0" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.6.0 Search vendor "Libtiff" for product "Libtiff" and version "3.6.0" | beta |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.6.0 Search vendor "Libtiff" for product "Libtiff" and version "3.6.0" | beta2 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.6.1 Search vendor "Libtiff" for product "Libtiff" and version "3.6.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.0 Search vendor "Libtiff" for product "Libtiff" and version "3.7.0" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.0 Search vendor "Libtiff" for product "Libtiff" and version "3.7.0" | alpha |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.0 Search vendor "Libtiff" for product "Libtiff" and version "3.7.0" | beta |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.0 Search vendor "Libtiff" for product "Libtiff" and version "3.7.0" | beta2 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.1 Search vendor "Libtiff" for product "Libtiff" and version "3.7.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.2 Search vendor "Libtiff" for product "Libtiff" and version "3.7.2" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.3 Search vendor "Libtiff" for product "Libtiff" and version "3.7.3" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.7.4 Search vendor "Libtiff" for product "Libtiff" and version "3.7.4" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.8.0 Search vendor "Libtiff" for product "Libtiff" and version "3.8.0" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.8.1 Search vendor "Libtiff" for product "Libtiff" and version "3.8.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.8.2 Search vendor "Libtiff" for product "Libtiff" and version "3.8.2" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9 Search vendor "Libtiff" for product "Libtiff" and version "3.9" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.0 Search vendor "Libtiff" for product "Libtiff" and version "3.9.0" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.0 Search vendor "Libtiff" for product "Libtiff" and version "3.9.0" | beta |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.1 Search vendor "Libtiff" for product "Libtiff" and version "3.9.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.2 Search vendor "Libtiff" for product "Libtiff" and version "3.9.2" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.2-5.2.1 Search vendor "Libtiff" for product "Libtiff" and version "3.9.2-5.2.1" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.3 Search vendor "Libtiff" for product "Libtiff" and version "3.9.3" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.4 Search vendor "Libtiff" for product "Libtiff" and version "3.9.4" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 3.9.5 Search vendor "Libtiff" for product "Libtiff" and version "3.9.5" | - |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | alpha |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | beta1 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | beta2 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | beta3 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | beta4 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | beta5 |
Affected
| ||||||
| Libtiff Search vendor "Libtiff" | Libtiff Search vendor "Libtiff" for product "Libtiff" | 4.0 Search vendor "Libtiff" for product "Libtiff" and version "4.0" | beta6 |
Affected
| ||||||