CVE-2013-1961

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-1961
Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104916.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105253.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105828.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00058.html
http://lists.opensuse.org/opensuse-updates/2013-06/msg00080.html
http://rhn.redhat.com/errata/RHSA-2014-0223.html
http://seclists.org/oss-sec/2013/q2/254
http://secunia.com/advisories/53237 Vendor Advisory
http://secunia.com/advisories/53765 Vendor Advisory
http://www.debian.org/security/2013/dsa-2698
http://www.securityfocus.com/bid/59607
https://bugzilla.redhat.com/show_bug.cgi?id=952131
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:remotesensing:libtiff:*:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta18:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta24:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta28:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta29:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta31:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta32:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta34:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta35:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta36:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.4:beta37:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.4:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.5:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.6:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.6:beta:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.7:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha2:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha3:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.7:alpha4:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.5.7:beta:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.6.0:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.6.0:beta:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.6.0:beta2:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.0:alpha:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.0:beta:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.0:beta2:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.2:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.3:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.7.4:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.8.0:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.8.1:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.8.2:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.9.0:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.9.0:beta:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.9.1:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.9.2:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.9.3:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:3.9.4:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:remotesensing:libtiff:4.0.2:*:*:*:*:*:*:*
History

13 Feb 2023, 04:42

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2013-1961', 'name': 'https://access.redhat.com/security/cve/CVE-2013-1961', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2014:0223', 'name': 'https://access.redhat.com/errata/RHSA-2014:0223', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2014:0222', 'name': 'https://access.redhat.com/errata/RHSA-2014:0222', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2013-1961 libtiff (tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.

02 Feb 2023, 15:16

Type Values Removed Values Added
Summary Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file. CVE-2013-1961 libtiff (tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2013-1961 -
  • (MISC) https://access.redhat.com/errata/RHSA-2014:0223 -
  • (MISC) https://access.redhat.com/errata/RHSA-2014:0222 -
Information

Published : 2013-07-03 18:55

Updated : 2023-12-10 11:16

NVD link : CVE-2013-1961

Mitre link : CVE-2013-1961

CVE.ORG link : CVE-2013-1961

JSON object : View

Products Affected

remotesensing

  • libtiff
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer