CVE-2012-4564: Buffer Overflow

Published Oct 31, 2012
·
Updated

A flaw was found in the way ppm2tiff, a tool to create a TIFF file from PPM, PGM and PBM image files, did not check the return value of TIFFScanlineSize() function. When TIFFScanlineSize encountered an integer-overflow and returned zero, this value was not checked. A remote attacker could provide a specially-crafted PPM image format file, that when processed by ppm2tiff would lead to ppm2tiff executable crash or, potentially, arbitrary code execution with the privileges of the user running the ppm2tiff binary.

Other sources

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

MITRE

Affected Software

16 affected components
LibTIFF libtiff<=4.0.3
Debian Debian Linux=6.0
Debian Debian Linux=7.0
Canonical Ubuntu Linux=8.04
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.3
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
openSUSE openSUSE=11.4

Event History

Oct 31, 2012
Data Sourced
via Red Hat·06:04 AM
DescriptionSeverityAffected Software
Nov 11, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2012-4564?

CVE-2012-4564 is considered a moderate severity vulnerability due to potential exploitation risks.

2

How do I fix CVE-2012-4564?

To mitigate CVE-2012-4564, update the libtiff package to a version that is above 4.0.3.

3

What are the affected software versions for CVE-2012-4564?

CVE-2012-4564 affects libtiff versions up to 4.0.3 and several versions of Debian and Ubuntu Linux.

4

Can CVE-2012-4564 be exploited remotely?

Yes, CVE-2012-4564 can potentially be exploited by remote attackers through specially crafted image files.

5

What function is responsible for the vulnerability in CVE-2012-4564?

The vulnerability in CVE-2012-4564 is due to improper handling of the return value from the TIFFScanlineSize() function.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203