NetSight
IP …
medium5.5

CVE-2019-11459

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from T…

Impact

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

Affected products

VendorProductAffected versions
GnomeEvince
through 3.32.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 18.10, 19.04
FedoraprojectFedora
Versions 29, 30
DebianDebian Linux
Versions 8.0, 9.0, 10.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6
OpensuseLeap
Versions 15.0, 15.1

Weakness classification

CWE-754CWE-908

References