Total vulnerabilities in the database
ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
Software | From | Fixed in |
---|---|---|
libtiff / libtiff | - | 4.0.3.x |
debian / debian_linux | 7.0 | 7.0.x |
debian / debian_linux | 6.0 | 6.0.x |
canonical / ubuntu_linux | 11.10 | 11.10.x |
canonical / ubuntu_linux | 12.10 | 12.10.x |
canonical / ubuntu_linux | 12.04 | 12.04.x |
canonical / ubuntu_linux | 8.04 | 8.04.x |
canonical / ubuntu_linux | 10.04 | 10.04.x |
redhat / enterprise_linux_server | 5.0 | 5.0.x |
redhat / enterprise_linux_workstation | 5.0 | 5.0.x |
redhat / enterprise_linux_desktop | 6.0 | 6.0.x |
redhat / enterprise_linux_server | 6.0 | 6.0.x |
redhat / enterprise_linux_workstation | 6.0 | 6.0.x |
redhat / enterprise_linux_desktop | 5.0 | 5.0.x |
redhat / enterprise_linux_eus | 6.3 | 6.3.x |
opensuse / opensuse | 11.4 | 11.4.x |