CVE-2013-1961
(tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.
Desbordamiento de búfer basado en función t2p_write_pdf_page en tiff2pdf in libtiff anterior a 4.0.3 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través la manipulación del alto de la imagen y la resolución en un archivo de imagen TIFF.
A heap-based buffer overflow flaw was found in the way tiff2pdf of libtiff performed write of TIFF image content into particular PDF document file, in the tp_process_jpeg_strip() function. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash or, potentially, arbitrary code execution with the privileges of the user running the tiff2pdf binary. A stack-based buffer overflow was found in the way tiff2pdf of libtiff performed write of TIFF image content into particular PDF document file, when malformed image-length and resolution values are used in the TIFF file. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-02-19 CVE Reserved
- 2013-05-21 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-121: Stack-based Buffer Overflow
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/oss-sec/2013/q2/254 | Mailing List |
|
| http://www.securityfocus.com/bid/59607 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | <= 4.0.3 Search vendor "Remotesensing" for product "Libtiff" and version " <= 4.0.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta18 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta24 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta28 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta29 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta31 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta32 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta34 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta35 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta36 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.4" | beta37 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.3 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.5 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.5" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.6 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.6" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.6 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.6" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha2 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha3 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | alpha4 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.5.7 Search vendor "Remotesensing" for product "Libtiff" and version "3.5.7" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.0" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.0" | beta2 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.6.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.6.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | alpha |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.0" | beta2 |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.3 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.7.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.7.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.8.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.8.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.8.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.8.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.8.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.8.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.0 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.0" | beta |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.1 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.2 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.2" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.3 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.3" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 3.9.4 Search vendor "Remotesensing" for product "Libtiff" and version "3.9.4" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 4.0.0 Search vendor "Remotesensing" for product "Libtiff" and version "4.0.0" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 4.0.1 Search vendor "Remotesensing" for product "Libtiff" and version "4.0.1" | - |
Affected
| ||||||
| Remotesensing Search vendor "Remotesensing" | Libtiff Search vendor "Remotesensing" for product "Libtiff" | 4.0.2 Search vendor "Remotesensing" for product "Libtiff" and version "4.0.2" | - |
Affected
| ||||||