CVE-2020-35524
Description
A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiffs TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.413
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2.4 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Analytics 12.0.3 | Windows |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.6-1ubuntu0.8_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.6-1ubuntu0.8_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.9-5ubuntu0.4_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.0.9-5ubuntu0.4_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.04.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.04.1_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.10.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff5_4.1.0+git191117-2ubuntu0.20.10.1_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.6-1ubuntu0.8_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.6-1ubuntu0.8_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.9-5ubuntu0.4_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.0.9-5ubuntu0.4_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.04.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.04.1_amd64.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.10.1_i386.deb | Linux |
| Tag Image File Format (TIFF) library (USN-4755-1) libtiff-tools_4.1.0+git191117-2ubuntu0.20.10.1_amd64.deb | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-32bit-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-debuginfo-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) libtiff5-debuginfo-32bit-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) tiff-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) tiff-debuginfo-4.0.9-44.45.1.x86_64.rpm | Linux |
| SUSE-SU-2022:0496-1(SUSE Linux Enterprise Server 12-SP5 ) tiff-debugsource-4.0.9-44.45.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234