CVE-2013-4232

Publication date 10 September 2013

Last updated 24 July 2024

Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
tiff	14.04 LTS trusty	Not affected
	13.10 saucy	Fixed 4.0.2-4ubuntu3.1
	13.04 raring	Ignored
	12.10 quantal	Fixed 4.0.2-1ubuntu2.3
	12.04 LTS precise	Fixed 3.9.5-2ubuntu1.6
	10.04 LTS lucid	Fixed 3.9.2-2ubuntu0.14
tiff3	14.04 LTS trusty	Not in release
	13.10 saucy	Not affected
	13.04 raring	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

tiff3 does not build the tiff tools

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-2205-1
LibTIFF vulnerabilities
6 May 2014

Other references

http://www.asmail.be/msg0055359936.html
https://www.cve.org/CVERecord?id=CVE-2013-4232