CVE-2011-0192 Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary c...
HighCVSS 9.3
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple itunes | <= 10.1.2 | No fix listed |
| apple itunes | = 4.0.0 | No fix listed |
| apple itunes | = 4.0.1 | No fix listed |
| apple itunes | = 4.1.0 | No fix listed |
| apple itunes | = 4.2.0 | No fix listed |
| apple itunes | = 4.5 | No fix listed |
| apple itunes | = 4.5.0 | No fix listed |
| apple itunes | = 4.6 | No fix listed |
| apple itunes | = 4.6.0 | No fix listed |
| apple itunes | = 4.7 | No fix listed |
| apple itunes | = 4.7.0 | No fix listed |
| apple itunes | = 4.7.1 | No fix listed |
| apple itunes | = 4.7.2 | No fix listed |
| apple itunes | = 4.8.0 | No fix listed |
| apple itunes | = 4.9.0 | No fix listed |
| apple itunes | = 5.0 | No fix listed |
| apple itunes | = 5.0.0 | No fix listed |
| apple itunes | = 5.0.1 | No fix listed |
| apple itunes | = 6.0.0 | No fix listed |
| apple itunes | = 6.0.1 | No fix listed |
| apple itunes | = 6.0.2 | No fix listed |
| apple itunes | = 6.0.3 | No fix listed |
| apple itunes | = 6.0.4 | No fix listed |
| apple itunes | = 6.0.4.2 | No fix listed |
| apple itunes | = 6.0.5 | No fix listed |
Show 43 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple itunes | = 7.0.0 | No fix listed |
| apple itunes | = 7.0.1 | No fix listed |
| apple itunes | = 7.0.2 | No fix listed |
| apple itunes | = 7.1.0 | No fix listed |
| apple itunes | = 7.1.1 | No fix listed |
| apple itunes | = 7.2.0 | No fix listed |
| apple itunes | = 7.3.0 | No fix listed |
| apple itunes | = 7.3.1 | No fix listed |
| apple itunes | = 7.3.2 | No fix listed |
| apple itunes | = 7.4 | No fix listed |
| apple itunes | = 7.4.0 | No fix listed |
| apple itunes | = 7.4.1 | No fix listed |
| apple itunes | = 7.4.2 | No fix listed |
| apple itunes | = 7.4.3 | No fix listed |
| apple itunes | = 7.5 | No fix listed |
| apple itunes | = 7.5.0 | No fix listed |
| apple itunes | = 7.6 | No fix listed |
| apple itunes | = 7.6.0 | No fix listed |
| apple itunes | = 7.6.1 | No fix listed |
| apple itunes | = 7.6.2 | No fix listed |
| apple itunes | = 7.7 | No fix listed |
| apple itunes | = 7.7.0 | No fix listed |
| apple itunes | = 7.7.1 | No fix listed |
| apple itunes | = 8.0.0 | No fix listed |
| apple itunes | = 8.0.1 | No fix listed |
| apple itunes | = 8.0.2 | No fix listed |
| apple itunes | = 8.1 | No fix listed |
| apple itunes | = 8.1.1 | No fix listed |
| apple itunes | = 8.2 | No fix listed |
| apple itunes | = 8.2.1 | No fix listed |
| apple itunes | = 9.0.0 | No fix listed |
| apple itunes | = 9.0.1 | No fix listed |
| apple itunes | = 9.0.2 | No fix listed |
| apple itunes | = 9.0.3 | No fix listed |
| apple itunes | = 9.2 | No fix listed |
| apple itunes | = 9.2.1 | No fix listed |
| apple itunes | = 10.0 | No fix listed |
| apple itunes | = 10.0.1 | No fix listed |
| apple itunes | = 10.1 | No fix listed |
| apple itunes | = 10.1.1 | No fix listed |
| debian/tiff(Debian:12) | < 3.9.4-7 | 3.9.4-7 |
| debian/tiff(Debian:13) | < 3.9.4-7 | 3.9.4-7 |
| debian/tiff(Debian:14) | < 3.9.4-7 | 3.9.4-7 |
References
- blackberry.com
- APPLE-SA-2011-10-12-1 vendor-advisory
- APPLE-SA-2011-10-12-2 vendor-advisory
- APPLE-SA-2011-03-09-1 vendor-advisory
- APPLE-SA-2011-03-09-2 vendor-advisory
- APPLE-SA-2011-03-09-3 vendor-advisory
- APPLE-SA-2011-03-02-1 patch vendor-advisory
- APPLE-SA-2011-03-21-1 vendor-advisory
- FEDORA-2011-3836 vendor-advisory
- FEDORA-2011-3827 vendor-advisory
- FEDORA-2011-2540 vendor-advisory
- FEDORA-2011-2498 vendor-advisory
- SUSE-SR:2011:005 vendor-advisory
- SUSE-SR:2011:009 vendor-advisory
- 43585 third-party-advisory
- 43593 third-party-advisory
- 43664 third-party-advisory
- 43934 third-party-advisory
- 44117 third-party-advisory
- 44135 third-party-advisory
- 50726 third-party-advisory
- GLSA-201209-02 vendor-advisory
- SSA:2011-098-01 vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- DSA-2210 vendor-advisory
- MDVSA-2011:043 vendor-advisory
- RHSA-2011:0318 vendor-advisory
- 46658 vdb-entry
- 1025153 vdb-entry
- ADV-2011-0551 vdb-entry
- ADV-2011-0599 vdb-entry
- ADV-2011-0621 vdb-entry
- ADV-2011-0845 vdb-entry
- ADV-2011-0905 vdb-entry
- ADV-2011-0930 vdb-entry
- ADV-2011-0960 vdb-entry
- bugzilla.redhat.com
- Debian Security Tracker CVE-2011-0192 vendor-advisory