| ID |
CVE-2014-9330
|
| Summary |
Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 5.0 (as of 05-01-2018 - 02:29) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-189 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| redhat
via4
|
| advisories | | | rpms | - libtiff-0:4.0.3-25.el7_2
- libtiff-debuginfo-0:4.0.3-25.el7_2
- libtiff-devel-0:4.0.3-25.el7_2
- libtiff-static-0:4.0.3-25.el7_2
- libtiff-tools-0:4.0.3-25.el7_2
- libtiff-0:3.9.4-18.el6_8
- libtiff-debuginfo-0:3.9.4-18.el6_8
- libtiff-devel-0:3.9.4-18.el6_8
- libtiff-static-0:3.9.4-18.el6_8
|
|
| refmap
via4
|
| bid | 71789 | | confirm | | | debian | DSA-3273 | | fulldisc | 20141222 CVE-2014-9330: Libtiff integer overflow in bmp2tiff | | gentoo | GLSA-201701-16 | | sectrack | 1031442 |
|
| Last major update |
05-01-2018 - 02:29 |
| Published |
20-01-2015 - 15:59 |
| Last modified |
05-01-2018 - 02:29 |
