CVE-2011-1167: Buffer Overflow
A flaw was reported in libtiff's thunder decoder. The thunder decoder assumes 4bits per pixel, but if a file has bitpersample set to a smaller value, or defaulted (1) then the allocated strip buffer will be too small, and a heap-based buffer overlow may occur. This could be used to crash an application linked to libtiff, or execute arbitrary code with the privileges of the application opening a malicious TIFF file.
Other sources
Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1167?
CVE-2011-1167 has a high severity rating due to the potential for a heap-based buffer overflow.
How do I fix CVE-2011-1167?
To fix CVE-2011-1167, update libtiff to a version later than 3.9.4 or apply the relevant patches provided by the maintainers.
Which versions of libtiff are affected by CVE-2011-1167?
CVE-2011-1167 affects libtiff versions up to and including 3.9.4 and specific 3.4 beta versions.
What potential impact does CVE-2011-1167 have on affected systems?
CVE-2011-1167 can be exploited to cause a denial of service by crashing the application using the vulnerable libtiff.
Is CVE-2011-1167 a widely known vulnerability?
CVE-2011-1167 is recognized within the cybersecurity community and has been documented in various security advisories.