CVE-2012-4447: Buffer Overflow
First published: Tue Sep 25 2012(Updated: )
A heap-based buffer overflow was found in the way libtiff, library for manipulating TIFF (Tagged Image File Format) image format files, processed certain TIFF images using PixarLog Compression format. An attacker could create a specially-crafted TIFF image that, when opened, could cause an application using libtiff to crash or, possibly, execute arbitrary code with the privileges of the user running the application.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libtiff Libtiff | <=4.0.2 | |
| Libtiff Libtiff | =3.4 | |
| Libtiff Libtiff | =3.4-beta18 | |
| Libtiff Libtiff | =3.4-beta24 | |
| Libtiff Libtiff | =3.4-beta28 | |
| Libtiff Libtiff | =3.4-beta29 | |
| Libtiff Libtiff | =3.4-beta31 | |
| Libtiff Libtiff | =3.4-beta32 | |
| Libtiff Libtiff | =3.4-beta34 | |
| Libtiff Libtiff | =3.4-beta35 | |
| Libtiff Libtiff | =3.4-beta36 | |
| Libtiff Libtiff | =3.4-beta37 | |
| Libtiff Libtiff | =3.5.1 | |
| Libtiff Libtiff | =3.5.2 | |
| Libtiff Libtiff | =3.5.3 | |
| Libtiff Libtiff | =3.5.4 | |
| Libtiff Libtiff | =3.5.5 | |
| Libtiff Libtiff | =3.5.6 | |
| Libtiff Libtiff | =3.5.6-beta | |
| Libtiff Libtiff | =3.5.7 | |
| Libtiff Libtiff | =3.5.7-alpha | |
| Libtiff Libtiff | =3.5.7-alpha2 | |
| Libtiff Libtiff | =3.5.7-alpha3 | |
| Libtiff Libtiff | =3.5.7-alpha4 | |
| Libtiff Libtiff | =3.5.7-beta | |
| Libtiff Libtiff | =3.6.0 | |
| Libtiff Libtiff | =3.6.0-beta | |
| Libtiff Libtiff | =3.6.0-beta2 | |
| Libtiff Libtiff | =3.6.1 | |
| Libtiff Libtiff | =3.7.0 | |
| Libtiff Libtiff | =3.7.0-alpha | |
| Libtiff Libtiff | =3.7.0-beta | |
| Libtiff Libtiff | =3.7.0-beta2 | |
| Libtiff Libtiff | =3.7.1 | |
| Libtiff Libtiff | =3.7.2 | |
| Libtiff Libtiff | =3.7.3 | |
| Libtiff Libtiff | =3.7.4 | |
| Libtiff Libtiff | =3.8.0 | |
| Libtiff Libtiff | =3.8.1 | |
| Libtiff Libtiff | =3.8.2 | |
| Libtiff Libtiff | =3.9 | |
| Libtiff Libtiff | =3.9.0 | |
| Libtiff Libtiff | =3.9.0-beta | |
| Libtiff Libtiff | =3.9.1 | |
| Libtiff Libtiff | =3.9.2 | |
| Libtiff Libtiff | =3.9.2-5.2.1 | |
| Libtiff Libtiff | =3.9.3 | |
| Libtiff Libtiff | =3.9.4 | |
| Libtiff Libtiff | =3.9.5 | |
| Libtiff Libtiff | =4.0 | |
| Libtiff Libtiff | =4.0-alpha | |
| Libtiff Libtiff | =4.0-beta1 | |
| Libtiff Libtiff | =4.0-beta2 | |
| Libtiff Libtiff | =4.0-beta3 | |
| Libtiff Libtiff | =4.0-beta4 | |
| Libtiff Libtiff | =4.0-beta5 | |
| Libtiff Libtiff | =4.0-beta6 | |
| Libtiff Libtiff | =4.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00076.html
- http://rhn.redhat.com/errata/RHSA-2012-1590.html
- http://secunia.com/advisories/49938
- http://secunia.com/advisories/51049
- http://www.debian.org/security/2012/dsa-2561
- http://www.openwall.com/lists/oss-security/2012/09/25/14
- http://www.openwall.com/lists/oss-security/2012/09/25/9
- http://www.remotesensing.org/libtiff/v4.0.3.html
- http://www.securityfocus.com/bid/55673
- http://www.ubuntu.com/usn/USN-1631-1
- https://bugzilla.redhat.com/show_bug.cgi?id=860198
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=616925&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=616925&action=edit
- https://access.redhat.com/security/cve/CVE-2012-4447
- http://seclists.org/oss-sec/2012/q3/563
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=880907
- https://rhn.redhat.com/errata/RHSA-2012-1590.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=889443
- collector/redhat-bugzilla
- alias/CVE-2012-4447
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- vendor/libtiff
- canonical/libtiff libtiff
- version/libtiff libtiff/4.0.2
- version/libtiff libtiff/3.4
- version/libtiff libtiff/3.4-beta18
- version/libtiff libtiff/3.4-beta24
- version/libtiff libtiff/3.4-beta28
- version/libtiff libtiff/3.4-beta29
- version/libtiff libtiff/3.4-beta31
- version/libtiff libtiff/3.4-beta32
- version/libtiff libtiff/3.4-beta34
- version/libtiff libtiff/3.4-beta35
- version/libtiff libtiff/3.4-beta36
- version/libtiff libtiff/3.4-beta37
- version/libtiff libtiff/3.5.1
- version/libtiff libtiff/3.5.2
- version/libtiff libtiff/3.5.3
- version/libtiff libtiff/3.5.4
- version/libtiff libtiff/3.5.5
- version/libtiff libtiff/3.5.6
- version/libtiff libtiff/3.5.6-beta
- version/libtiff libtiff/3.5.7
- version/libtiff libtiff/3.5.7-alpha
- version/libtiff libtiff/3.5.7-alpha2
- version/libtiff libtiff/3.5.7-alpha3
- version/libtiff libtiff/3.5.7-alpha4
- version/libtiff libtiff/3.5.7-beta
- version/libtiff libtiff/3.6.0
- version/libtiff libtiff/3.6.0-beta
- version/libtiff libtiff/3.6.0-beta2
- version/libtiff libtiff/3.6.1
- version/libtiff libtiff/3.7.0
- version/libtiff libtiff/3.7.0-alpha
- version/libtiff libtiff/3.7.0-beta
- version/libtiff libtiff/3.7.0-beta2
- version/libtiff libtiff/3.7.1
- version/libtiff libtiff/3.7.2
- version/libtiff libtiff/3.7.3
- version/libtiff libtiff/3.7.4
- version/libtiff libtiff/3.8.0
- version/libtiff libtiff/3.8.1
- version/libtiff libtiff/3.8.2
- version/libtiff libtiff/3.9
- version/libtiff libtiff/3.9.0
- version/libtiff libtiff/3.9.0-beta
- version/libtiff libtiff/3.9.1
- version/libtiff libtiff/3.9.2
- version/libtiff libtiff/3.9.2-5.2.1
- version/libtiff libtiff/3.9.3
- version/libtiff libtiff/3.9.4
- version/libtiff libtiff/3.9.5
- version/libtiff libtiff/4.0
- version/libtiff libtiff/4.0-alpha
- version/libtiff libtiff/4.0-beta1
- version/libtiff libtiff/4.0-beta2
- version/libtiff libtiff/4.0-beta3
- version/libtiff libtiff/4.0-beta4
- version/libtiff libtiff/4.0-beta5
- version/libtiff libtiff/4.0-beta6
- version/libtiff libtiff/4.0.1