| 제목 | TinyTIFF global-buffer-overflow |
|---|
| 설명 | A global-buffer-overflow issue was discovered in TinyTIFF in tinytiffreader.c file. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
OS information
ubuntu@ubuntu:~/Documents/TinyTIFF/src$ uname -a
Linux ubuntu 5.15.0-58-generic #64~20.04.1-Ubuntu SMP Fri Jan 6 16:42:31 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Summary
AddressSanitizer: global-buffer-overflow (/home/ubuntu/Desktop/TinyTIFF/src/asan_tinytiffreader+0x4969c6) in __asan_memcpy
Problem Code location
#0 0x4969c6 in __asan_memcpy (/home/ubuntu/Desktop/TinyTIFF/src/asan_tinytiffreader+0x4969c6)
#1 0x4cdff4 in TinyTIFFReader_readNextFrame /home/ubuntu/Desktop/TinyTIFF/src/tinytiffreader.c
#2 0x4cb3e9 in TinyTIFFReader_open /home/ubuntu/Desktop/TinyTIFF/src/tinytiffreader.c:921:9
#3 0x4d10ea in main /home/ubuntu/Desktop/TinyTIFF/src/tinytiffreader.c:1058:10
#4 0x7ffff7c4a082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
#5 0x41c3bd in _start (/home/ubuntu/Desktop/TinyTIFF/src/asan_tinytiffreader+0x41c3bd) |
|---|
| 원천 | ⚠️ https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF |
|---|
| 사용자 | 10cksYiqiyinHangzhouTechnology (UID 41666) |
|---|
| 제출 | 2023. 03. 21. AM 01:34 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 03. 22. AM 11:06 (1 day later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 223553 [TinyTIFF 3.0.0.0 File tinytiffreader.c 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|