CVE-2013-1961: Buffer Overflow

Published Apr 15, 2013
·
Updated

A stack-based buffer overflow was found in the way tiff2pdf, a TIFF image to a PDF document conversion tool, of libtiff, a library of functions for manipulating TIFF (Tagged Image File Format) image format files, performed write of TIFF image content into particular PDF document file, when malformed image-length and resolution values are used in the TIFF file. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash.

Acknowledgements:

Red Hat would like to thank Emmanuel Bouillon (NCI Agency) for reporting this issue.

Other sources

Stack-based buffer overflow in the t2pwritepdfpage function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.

MITRE

Affected Software

49 affected components
Remotesensing Libtiff<=4.0.3
Remotesensing Libtiff=3.4
Remotesensing Libtiff=3.4-beta18
Remotesensing Libtiff=3.4-beta24
Remotesensing Libtiff=3.4-beta28
Remotesensing Libtiff=3.4-beta29
Remotesensing Libtiff=3.4-beta31
Remotesensing Libtiff=3.4-beta32
Remotesensing Libtiff=3.4-beta34
Remotesensing Libtiff=3.4-beta35
Remotesensing Libtiff=3.4-beta36
Remotesensing Libtiff=3.4-beta37
Remotesensing Libtiff=3.5.1
Remotesensing Libtiff=3.5.2
Remotesensing Libtiff=3.5.3
Remotesensing Libtiff=3.5.4
Remotesensing Libtiff=3.5.5
Remotesensing Libtiff=3.5.6
Remotesensing Libtiff=3.5.6-beta
Remotesensing Libtiff=3.5.7
Remotesensing Libtiff=3.5.7-alpha
Remotesensing Libtiff=3.5.7-alpha2
Remotesensing Libtiff=3.5.7-alpha3
Remotesensing Libtiff=3.5.7-alpha4
Remotesensing Libtiff=3.5.7-beta
Remotesensing Libtiff=3.6.0
Remotesensing Libtiff=3.6.0-beta
Remotesensing Libtiff=3.6.0-beta2
Remotesensing Libtiff=3.6.1
Remotesensing Libtiff=3.7.0
Remotesensing Libtiff=3.7.0-alpha
Remotesensing Libtiff=3.7.0-beta
Remotesensing Libtiff=3.7.0-beta2
Remotesensing Libtiff=3.7.1
Remotesensing Libtiff=3.7.2
Remotesensing Libtiff=3.7.3
Remotesensing Libtiff=3.7.4
Remotesensing Libtiff=3.8.0
Remotesensing Libtiff=3.8.1
Remotesensing Libtiff=3.8.2
Remotesensing Libtiff=3.9.0
Remotesensing Libtiff=3.9.0-beta
Remotesensing Libtiff=3.9.1
Remotesensing Libtiff=3.9.2
Remotesensing Libtiff=3.9.3
Remotesensing Libtiff=3.9.4
Remotesensing Libtiff=4.0.0
Remotesensing Libtiff=4.0.1
Remotesensing Libtiff=4.0.2

Event History

Apr 15, 2013
Data Sourced
09:25 AM
DescriptionSeverityAffected Software
Jul 3, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2013-1961?

CVE-2013-1961 is classified as a high severity vulnerability due to the potential for remote code execution through crafted TIFF files.

2

How do I fix CVE-2013-1961?

To fix CVE-2013-1961, upgrade libtiff to version 4.0.4 or later.

3

What systems are affected by CVE-2013-1961?

CVE-2013-1961 affects multiple versions of libtiff including versions 3.4 through 4.0.3.

4

What types of attacks can exploit CVE-2013-1961?

CVE-2013-1961 can be exploited through specially crafted TIFF files leading to stack-based buffer overflow.

5

Is CVE-2013-1961 widely exploited in the wild?

As of now, there are no widespread reports of exploitation of CVE-2013-1961, but it remains a significant security concern.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203