CVE-2012-2088 in LibTIFF
Resumen (Inglés)
Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow.
Reservar
2012-04-04
Divulgación
2012-07-22
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 5639 | LibTIFF tif_dirread.c TIFFReadDirectory Ejecución remota de código | 189 | Prueba de concepto | Arreglo oficial | CVE-2012-2088 |