CVE-2013-4244: Buffer Overflow
An OOB Write was found in the LZW decompressor used in gif2tiff, a tool to convert GIF images to TIFF. A remote attacker could provide a specially-crafted GIF file that, when processed by gif2tiff, would cause gif2tiff to crash or, potentially, execute arbitrary code with the privileges of the user running gif2tiff.
Other sources
The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4244?
CVE-2013-4244 is considered a moderate severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2013-4244?
To fix CVE-2013-4244, upgrade to a patched version of libtiff that addresses this out-of-bounds write vulnerability.
Which versions of libtiff are affected by CVE-2013-4244?
CVE-2013-4244 affects libtiff versions up to and including 4.0.3 and specific versions of 3.4.
Can CVE-2013-4244 allow attackers to execute arbitrary code?
Yes, CVE-2013-4244 can potentially allow attackers to execute arbitrary code by exploiting a specially-crafted GIF file.
Is CVE-2013-4244 a critical vulnerability?
CVE-2013-4244 is not classified as critical but poses significant risk, particularly if exploited in environments processing untrusted GIF files.