OSVDB ID: 12555

Title: LibTIFF Directory Entry Count Remote Overflow

Info

Disclosure
Dec 21, 2004

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A local overflow exists in LibTIFF. The tdir_count variable is not validated before being passed to CheckMalloc() resulting in a heap overflow. With a specially crafted request, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Upgrade to version 3.7.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Sam Leffler

libtiff

 3.5.7
3.7.0

References

Credit
  • infamous41md - infamous41mdBrand New Doo Doohotpop.com -


Direct URL: http://osvdb.org/36218