CVE-2013-4231

Publication date 19 January 2014

Last updated 24 July 2024

Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
tiff	14.04 LTS trusty	Not affected
	13.10 saucy	Fixed 4.0.2-4ubuntu3.1
	13.04 raring	Ignored
	12.10 quantal	Fixed 4.0.2-1ubuntu2.3
	12.04 LTS precise	Fixed 3.9.5-2ubuntu1.6
	10.04 LTS lucid	Fixed 3.9.2-2ubuntu0.14
tiff3	14.04 LTS trusty	Not in release
	13.10 saucy	Not affected
	13.04 raring	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release

CVE-2013-4231

Status

Notes

jdstrand

References

Related Ubuntu Security Notices (USN)

Other references