Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LibTIFF 缓冲区错误漏洞
Vulnerability Description
LibTIFF是一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。 LibTIFF中存在缓冲区错误漏洞，可被恶意人员利用操控应用程序使用库。该漏洞源于处理T2P结构指针时，‘t2p_read_tiff_init()’函数（tools/tiff2pdf.c）中存在错误。攻击者可利用该漏洞通过特制的TIFF图像导致基于堆的缓冲区溢出漏洞。成功的利用将执行任意代码。LibTIFF4.0.2版本中存在漏洞，其他版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A