Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-26733

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

TinyTIFF是Jan W. Krieger个人开发者的一个轻量级的C/C++库。能够读写基本的TIFF文件。 tinyTIFF v.3.0版本存在安全漏洞，该漏洞源于该系统存在缓冲区溢出问题，攻击者利用该漏洞可以通过 tinytiffreader.c 文件中的 TinyTiffReader_readNextFrame 函数造成拒绝服务。

AI Predicted 5.5 Difficulty: Easy EPSS 0.35% · P28

Possible ATT&CK Techniques 1 AI

T1211 · Exploitation for Stealth
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-26733

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tinytiffreader.c file.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
tinyTIFF 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TinyTIFF是Jan W. Krieger个人开发者的一个轻量级的C/C++库。能够读写基本的TIFF文件。 tinyTIFF v.3.0版本存在安全漏洞，该漏洞源于该系统存在缓冲区溢出问题，攻击者利用该漏洞可以通过 tinytiffreader.c 文件中的 TinyTiffReader_readNextFrame 函数造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2023-26733

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-26733

请登录查看更多情报信息。

Other References for CVE-2023-26733 (2)

Same Patch Batch · n/a · 2023-04-04 · 77 CVEs total

CVE-2023-28613 6.8 MEDIUM SAMSUNG Exynos 输入验证错误漏洞
CVE-2023-26750 Yii SQL注入漏洞
CVE-2023-25303 ATLauncher 路径遍历漏洞
CVE-2023-26991 SWFTools 资源管理错误漏洞
CVE-2023-25355 CoreDial sipXcom sipXopenfire 操作系统命令注入漏洞
CVE-2023-25305 PolyMC Launcher 路径遍历漏洞
CVE-2023-0738 OrangeScrum 跨站脚本漏洞
CVE-2023-0486 VitalPBX 跨站脚本漏洞
CVE-2023-0480 VitalPBX 跨站请求伪造漏洞
CVE-2023-0357 Helpy 跨站脚本漏洞
CVE-2023-0835 markdown-pdf 11.0.0 - Local File Read via Server Side XSS
CVE-2023-25356 CoreDial sipXcom sipXopenfire 参数注入漏洞
CVE-2023-26775 Monitorr 代码问题漏洞
CVE-2023-26776 Monitorr 跨站脚本漏洞
CVE-2023-26777 Uptime Kuma 跨站脚本漏洞
CVE-2023-26855 ChurchCRM 安全特征问题漏洞
CVE-2023-26866 Green Packet OH736 命令注入漏洞
CVE-2023-26921 Quectel AG550QCN 操作系统命令注入漏洞
CVE-2023-26974 Irfanview 缓冲区错误漏洞
CVE-2023-26976 Tenda AC6 缓冲区错误漏洞

Showing top 20 of 77 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-26733

No comments yet

Leave a comment