ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade tiff | Aug 30, 2017 | Nov 11, 2012 |
| Centos_linux | — | Upgrade libtiff-staticUpgrade libtiffUpgrade libtiff-devel | Dec 1, 2016 | Nov 11, 2012 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Nov 11, 2012 |
| Gentoo Linux | — | Upgrade media-libs/tiff. | Oct 30, 2017 | Nov 11, 2012 |
| Oracle Solaris | — | Upgrade image/library/libtiff to version 3.9.5-0.175.1.14.0.1.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade image/editor/gimp to version 2.6.10-0.175.1.7.0.2.0 on Solaris 11.1 | May 29, 2017 | Nov 11, 2012 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiff-staticUpgrade libtiff | Oct 16, 2024 | Nov 11, 2012 |
| Suse | — | Upgrade libtiff3-32bitUpgrade libtiff-develUpgrade libtiff6Upgrade libtiff6-32bitUpgrade libtiff5-32bitUpgrade libtiff-devel-32bitUpgrade tiff-docsUpgrade tiffUpgrade libtiff3Upgrade libtiff5Upgrade libtiff-devel-docsUpgrade libtiff3-x86 | Dec 12, 2013 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libtiff4Upgrade libtiff5 | Nov 8, 2024 | Nov 11, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub