CVE-2020-35523
Description
An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.268
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3 | Windows |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.6-1ubuntu0.8_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.6-1ubuntu0.8_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.9-5ubuntu0.4_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.9-5ubuntu0.4_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.04.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.04.1_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.10.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.10.1_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.6-1ubuntu0.8_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.6-1ubuntu0.8_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.9-5ubuntu0.4_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.9-5ubuntu0.4_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.04.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.04.1_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.10.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.10.1_amd64.deb | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-32bit-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-debuginfo-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-debuginfo-32bit-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) tiff-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) tiff-debuginfo-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) tiff-debugsource-4.0.9-44.45.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234