CVE-2012-4564 in LibTIFFinfo

Summary

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

08/21/2012

Disclosure

11/11/2012

Entries

1: VDB-6862

CPE

ready

CVSS

10.0

EPSS

0.27173

Activities

Very Low

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!