CVE-2023-1560

TinyTIFF File tinytiffreader.c buffer overflow

CVSS 2.8 LOWEPSS 0.4%CWE-120

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 2.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 mar 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader.c of the component File Handler. The manipulation leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223553 was assigned to this vulnerability.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Produtos afetados

n/a · TinyTIFF

Referências

https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/id8 https://vuldb.com/?ctiid.223553 https://vuldb.com/?id.223553