LibTIFF 'TIFFScanlineSize()' Function Heap-based Buffer Overflow Vulnerability
4 Dec. 2012
Summary
The LibTIFF is prone to a heap-based buffer overflow vulnerability because it fails to properly bounds check user-supplied data before copying it into an insufficiently sized buffer.
Credit:
The information has been provided by Huzaifa Sidhpurwala.
LibTIFF is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the ppm2tiff utility when parsing images. By persuading a victim to open a specially-crafted PPM image file, a remote attacker could exploit this vulnerability to overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the affected application to crash.
