CVE-2012-4564
EPSS 27.2%tiff - heap overflow
發布日:2012/11/11修改日:2026/4/28
描述
ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
受影響套件(2)
- Debian/tifffrom 0, < 4.0.2-5
- Debian/tifffrom 0, < 3.9.4-5+squeeze7