Total vulnerabilities in the database
Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.
| Software | From | Fixed in |
|---|---|---|
| libtiff / libtiff | 3.6.1 | 3.6.1.x |
| libtiff / libtiff | 3.8.0 | 3.8.0.x |
| libtiff / libtiff | 3.8.1 | 3.8.1.x |
| libtiff / libtiff | 3.4 | 3.4.x |
| libtiff / libtiff | 3.5.7 | 3.5.7.x |
| libtiff / libtiff | 3.7.0 | 3.7.0.x |
| libtiff / libtiff | 3.6.0 | 3.6.0.x |
| libtiff / libtiff | 3.5.3 | 3.5.3.x |
| libtiff / libtiff | 3.7.1 | 3.7.1.x |
| libtiff / libtiff | 3.5.4 | 3.5.4.x |
| libtiff / libtiff | 3.5.2 | 3.5.2.x |
| libtiff / libtiff | 3.5.5 | 3.5.5.x |
| libtiff / libtiff | 3.5.1 | 3.5.1.x |
| libtiff / libtiff | 3.5.6 | 3.5.6.x |
| libtiff / libtiff | - | 3.8.2.x |