CVE-2012-2088 in LibTIFF

摘要 (英语)

Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow.

预定

2012-04-04

披露

2012-07-22

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
5639	LibTIFF tif_dirread.c TIFFReadDirectory 远程代码执行	189	概念验证	官方修复	CVE-2012-2088