Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1960
HistoryJul 03, 2013 - 6:55 p.m.

CVE-2013-1960

2013-07-0318:55:00
CWE-119
[email protected]
web.nvd.nist.gov
52
cve-2013-1960
nvd
libtiff
buffer overflow
t2p_process_jpeg_strip
denial of service
remote attack
arbitrary code execution
tiff image file

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.5%

JSON

Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.

Affected configurations

NVD
Node
remotesensinglibtiffRange≤4.0.3
OR
remotesensinglibtiffMatch3.4
OR
remotesensinglibtiffMatch3.4beta18
OR
remotesensinglibtiffMatch3.4beta24
OR
remotesensinglibtiffMatch3.4beta28
OR
remotesensinglibtiffMatch3.4beta29
OR
remotesensinglibtiffMatch3.4beta31
OR
remotesensinglibtiffMatch3.4beta32
OR
remotesensinglibtiffMatch3.4beta34
OR
remotesensinglibtiffMatch3.4beta35
OR
remotesensinglibtiffMatch3.4beta36
OR
remotesensinglibtiffMatch3.4beta37
OR
remotesensinglibtiffMatch3.5.1
OR
remotesensinglibtiffMatch3.5.2
OR
remotesensinglibtiffMatch3.5.3
OR
remotesensinglibtiffMatch3.5.4
OR
remotesensinglibtiffMatch3.5.5
OR
remotesensinglibtiffMatch3.5.6
OR
remotesensinglibtiffMatch3.5.6beta
OR
remotesensinglibtiffMatch3.5.7
OR
remotesensinglibtiffMatch3.5.7alpha
OR
remotesensinglibtiffMatch3.5.7alpha2
OR
remotesensinglibtiffMatch3.5.7alpha3
OR
remotesensinglibtiffMatch3.5.7alpha4
OR
remotesensinglibtiffMatch3.5.7beta
OR
remotesensinglibtiffMatch3.6.0
OR
remotesensinglibtiffMatch3.6.0beta
OR
remotesensinglibtiffMatch3.6.0beta2
OR
remotesensinglibtiffMatch3.6.1
OR
remotesensinglibtiffMatch3.7.0
OR
remotesensinglibtiffMatch3.7.0alpha
OR
remotesensinglibtiffMatch3.7.0beta
OR
remotesensinglibtiffMatch3.7.0beta2
OR
remotesensinglibtiffMatch3.7.1
OR
remotesensinglibtiffMatch3.7.2
OR
remotesensinglibtiffMatch3.7.3
OR
remotesensinglibtiffMatch3.7.4
OR
remotesensinglibtiffMatch3.8.0
OR
remotesensinglibtiffMatch3.8.1
OR
remotesensinglibtiffMatch3.8.2
OR
remotesensinglibtiffMatch3.9.0
OR
remotesensinglibtiffMatch3.9.0beta
OR
remotesensinglibtiffMatch3.9.1
OR
remotesensinglibtiffMatch3.9.2
OR
remotesensinglibtiffMatch3.9.3
OR
remotesensinglibtiffMatch3.9.4
OR
remotesensinglibtiffMatch4.0.0
OR
remotesensinglibtiffMatch4.0.1
OR
remotesensinglibtiffMatch4.0.2

Related

veracode 6
nvd 1
ubuntucve 1
prion 1
debiancve 1
cvelist 1
nessus 25
securityvulns 2
osv 1
openvas 29
debian 1
fedora 7
ubuntu 1
oraclelinux 3
centos 2
f5 2
redhat 3
amazon 1
gentoo 1
slackware 1
altlinux 1
veracode
veracode
Arbitrary Code Execution
2019-01-15 08:57:44
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
nvd
nvd
CVE-2013-1960
2013-07-03 18:55:00
ubuntucve
ubuntucve
CVE-2013-1960
2013-05-02 00:00:00
prion
prion
Heap overflow
2013-07-03 18:55:00
debiancve
debiancve
CVE-2013-1960
2013-07-03 18:55:00
cvelist
cvelist
CVE-2013-1960
2013-07-03 18:00:00
nessus
nessus
Debian DSA-2698-1 : tiff - buffer overflow
2013-06-19 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : tiff vulnerabilities (USN-1832-1)
2013-05-22 00:00:00
Mandriva Linux Security Advisory : libtiff (MDVSA-2013:208)
2013-08-07 00:00:00
securityvulns
securityvulns
LibTiff security vulnerabilities
2013-06-04 00:00:00
[USN-1832-1] LibTIFF vulnerabilities
2013-06-04 00:00:00
osv
osv
tiff - buffer overflow
2013-06-18 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0795-1)
2021-06-09 00:00:00
Debian Security Advisory DSA 2698-1 (tiff - buffer overflow)
2013-06-18 00:00:00
Debian: Security Advisory (DSA-2698-1)
2013-06-17 00:00:00
debian
debian
[SECURITY] [DSA 2698-1] tiff security update
2013-06-18 19:39:25
fedora
fedora
[SECURITY] Fedora 19 Update: libtiff-4.0.3-6.fc19
2013-05-09 18:57:39
[SECURITY] Fedora 18 Update: libtiff-4.0.3-6.fc18
2013-05-14 01:23:41
[SECURITY] Fedora 18 Update: libtiff-4.0.3-8.fc18
2013-08-18 00:38:46
ubuntu
ubuntu
LibTIFF vulnerabilities
2013-05-21 00:00:00
oraclelinux
oraclelinux
libtiff security update
2014-02-27 00:00:00
libtiff security update
2014-02-27 00:00:00
libtiff security update
2016-08-02 00:00:00
centos
centos
libtiff security update
2014-02-28 00:37:27
libtiff security update
2014-02-28 00:43:50
f5
f5
K16715 : Multiple LibTIFF vulnerabilities
2015-06-05 00:00:00
SOL16715 - Multiple LibTIFF vulnerabilities
2015-06-05 00:00:00
redhat
redhat
(RHSA-2014:0223) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0222) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0339) Important: rhev-hypervisor6 security update
2014-03-31 00:00:00
amazon
amazon
Medium: libtiff
2014-03-13 18:13:00
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2014-02-21 00:00:00
slackware
slackware
[slackware-security] libtiff
2013-10-18 19:38:32
altlinux
altlinux
Security fix for the ALT Linux 10 package libtiff version 4.0.10.0.57.f9fc01c3-alt1
2019-04-09 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.5%

JSON
Related for CVE-2013-1960
veracode6nvd1ubuntucve1prion1debiancve1cvelist1nessus25securityvulns2osv1openvas29debian1fedora7ubuntu1oraclelinux3centos2f52redhat3amazon1gentoo1slackware1altlinux1