CVE-2013-1960
(tiff2pdf): Heap-based buffer overflow in t2_process_jpeg_strip()
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.
Desbordamiento de búfer basado en memoria dinámica en la función tp_process_jpeg_strip en tiff2pdf en libtiff 4.0.3 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución arbitraria de código a través de una imagen TIFF manipulada.
A heap-based buffer overflow flaw was found in the way tiff2pdf of libtiff performed write of TIFF image content into particular PDF document file, in the tp_process_jpeg_strip() function. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash or, potentially, arbitrary code execution with the privileges of the user running the tiff2pdf binary. A stack-based buffer overflow was found in the way tiff2pdf of libtiff performed write of TIFF image content into particular PDF document file, when malformed image-length and resolution values are used in the TIFF file. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-02-19 CVE Reserved
- 2013-05-21 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-122: Heap-based Buffer Overflow
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/oss-sec/2013/q2/254 | Mailing List |
|
| http://www.securityfocus.com/bid/59609 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | <= 4.0.3 Search vendor "Remotesensing" for product "Libtiff" and version " <= 4.0.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta18 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta24 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta28 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta29 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta31 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta32 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta34 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta35 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta36 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta37 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.3 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.5 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.5" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.6 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.6" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.6 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.6" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha2 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha3 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha4 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.0" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.0" | beta2 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | alpha |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | beta2 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.3 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.8.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.8.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.8.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.8.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.8.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.8.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.0" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.3 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 4.0.0 Search vendor "Remotesensing" for product "Libtiff" and version "4.0.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 4.0.1 Search vendor "Remotesensing" for product "Libtiff" and version "4.0.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 4.0.2 Search vendor "Remotesensing" for product "Libtiff" and version "4.0.2" | - |
Affected
| ||||||