CVE-2011-1167 in iOS

Resumen (Inglés)

Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2011-03-03

Divulgación

2011-03-28

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
6338	Apple iOS ImageIO desbordamiento de búfer	119	Prueba de concepto	Arreglo oficial	CVE-2011-1167

Fuentes

• MITRE
• NVD
• CVE Details