REDHAT-BUG-2163606: Buffer Overflow

Q: What component must be used for this issue to be reachable?

The vulnerable code is in the tiffcrop utility, specifically its processCropSelections function. Exposure therefore depends on processing attacker-controlled TIFF images with tiffcrop.

Q: What does an attacker need to provide?

An attacker needs to supply a crafted TIFF image that triggers the heap-based buffer overflow during crop-selection processing.

Q: Which LibTIFF versions are identified as affected?

The issue is described as affecting LibTIFF through version 4.5.0.

Published Jan 24, 2023

Updated

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

https://gitlab.com/libtiff/libtiff/-/issues/488 https://gitlab.com/libtiff/libtiff/-/commit/d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5

Affected Software

1 affected component

LibTIFF libtiff<4.5.0

Event History

Jan 24, 2023

Data Sourced

via Red Hat·04:23 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What component must be used for this issue to be reachable?

The vulnerable code is in the tiffcrop utility, specifically its processCropSelections function. Exposure therefore depends on processing attacker-controlled TIFF images with tiffcrop.

What does an attacker need to provide?

An attacker needs to supply a crafted TIFF image that triggers the heap-based buffer overflow during crop-selection processing.

Which LibTIFF versions are identified as affected?

The issue is described as affecting LibTIFF through version 4.5.0.

REDHAT-BUG-2163606: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What component must be used for this issue to be reachable?

What does an attacker need to provide?

Which LibTIFF versions are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What component must be used for this issue to be reachable?

What does an attacker need to provide?

Which LibTIFF versions are identified as affected?