CVE-2011-1167

State: Published
Severity: Not scored
Published: Mar 28, 2011
Updated: Aug 6, 2024
Reserved: Mar 3, 2011

Description

Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

ADV-2011-0795vdb-entry
43974third-party-advisory
USN-1102-1vendor-advisory
ADV-2011-0845vdb-entry
https://bugzilla.redhat.com/show_bug.cgi?id=684939
ADV-2011-0860vdb-entry
SUSE-SR:2011:009vendor-advisory
APPLE-SA-2012-09-19-1vendor-advisory
http://support.apple.com/kb/HT5503
SSA:2011-098-01vendor-advisory
http://support.apple.com/kb/HT5130
43900third-party-advisory
71256vdb-entry
43934third-party-advisory
46951vdb-entry
FEDORA-2011-3836vendor-advisory
ADV-2011-0905vdb-entry
DSA-2210vendor-advisory
APPLE-SA-2012-02-01-1vendor-advisory
libtiff-thundercode-decoder-bo(66247)vdb-entry
http://blackberry.com/btsc/KB27244
1025257vdb-entry
20110321 ZDI-11-107: Libtiff ThunderCode Decoder THUNDER_2BITDELTAS Remote Code Execution Vulnerabilitymailing-list
http://bugzilla.maptools.org/show_bug.cgi?id=2300
GLSA-201209-02vendor-advisory
ADV-2011-0930vdb-entry
http://www.zerodayinitiative.com/advisories/ZDI-11-107
44135third-party-advisory
ADV-2011-0960vdb-entry
8165third-party-advisory
MDVSA-2011:064vendor-advisory
ADV-2011-0859vdb-entry
44117third-party-advisory
RHSA-2011:0392vendor-advisory
http://support.apple.com/kb/HT5281
FEDORA-2011-3827vendor-advisory
APPLE-SA-2012-05-09-1vendor-advisory
50726third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.