CVE-2012-4564

medium · 6.8

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

6.8

CVSS

13.5%

EPSS (exploit prob.)

96th

EPSS percentile

2012-11-11

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
libtiff	libtiff	<= 4.0.3
debian	debian_linux	6.0
debian	debian_linux	7.0
canonical	ubuntu_linux	8.04
canonical	ubuntu_linux	10.04
canonical	ubuntu_linux	11.10
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
redhat	enterprise_linux_desktop	5.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_eus	6.3
redhat	enterprise_linux_server	5.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_workstation	5.0
redhat	enterprise_linux_workstation	6.0
opensuse	opensuse	11.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-4564