« Volver al listado

CVE-2013-4231

Estado: ModificadaMedia (4.3)—

Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Libtiff — Libtiff

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4231",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-19T17:16:28.990",
  "references": [
    {
      "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2450",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0223.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/54543",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/54628",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.asmail.be/msg0055359936.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2744",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/08/10/2",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/61695",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=995965",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2450",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0223.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54543",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54628",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.asmail.be/msg0055359936.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2744",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/08/10/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/61695",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=995965",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c.  NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer en libtiff anterior a 4.0.3 que permite a atacantes remotos provocar una denegación de servicio (escritura fuera de rango) a través de (1) bloque de extensión en una imagen GIF manipulado o (2) el raster de la imagen  GIF a tools/gif2tiff. c o (3) un nombre de archivo largo de una imagen TIFF a tools/rgb2ycbcr.c para. NOTA: los vectores 1 y 3 están en disputa por parte de Red Hat, que establece que la entrada no se puede superar el tamaño de búfer asignado."
    }
  ],
  "lastModified": "2026-06-16T23:56:51.460",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6ACE30A-9C27-4D17-8BF7-3CE469C22CCC",
              "versionEndIncluding": "4.0.2"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "771AFF6D-7E21-4773-9B5B-FBDAAF7E0E57"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67471D55-629A-41E4-93CE-AE621F1E601C"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3DE62E7-01A1-4A58-954C-1DC80DD0F33D"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:beta2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "175E2A2C-A6B6-4FDE-9D23-74B9DA28D60F"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:beta3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9B1F1B0-07F0-437F-8812-78CC49A3D261"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:beta4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A2655FA-3C44-4FA1-97E4-26859D9B80C4"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:beta5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D436B894-A40C-45D8-A012-92F99F0B8D57"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0:beta6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2724F1A-B14E-4221-957C-FFEA8953E63A"
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:4.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51F952B2-E064-4E67-B25A-6A48AC794728"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}