Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11153
HistoryJan 15, 2019 - 8:57 a.m.

Arbitrary Code Execution

2019-01-1508:57:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.044 Low

EPSS

Percentile

92.5%

libtiff is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.