CVE-2013-4231
- State
- Published
- Severity
- Not scored
- Published
- Jan 19, 2014
- Updated
- Aug 6, 2024
- Reserved
- Jun 12, 2013
Description
Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://bugzilla.maptools.org/show_bug.cgi?id=2450
- RHSA-2014:0223vendor-advisory
- DSA-2744vendor-advisory
- 54543third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=995965
- [tiff] 20130801 Vulnerabilities in libtiff 4.0.3mailing-list
- 54628third-party-advisory
- [oss-security] 20130809 Re: CVE Request -- Four (stack-based) buffer overflows and one use-after-free in libtiff v4.0.3 reported by Pedro Ribeiromailing-list
- 61695vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.