NetSight
IP …
medium6.8

CVE-2012-4564

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly exec…

Impact

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

Affected products

VendorProductAffected versions
LibtiffLibtiff
through 4.0.3
DebianDebian Linux
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 8.04, 10.04, 11.10, 12.04, 12.10
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.3
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
OpensuseOpensuse
Version 11.4

References