Severity : Medium Published : 2012-08-13 Modified : 2013-05-29 Base Score : 6.8 Details : The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow. Product/Version : Pro 4.x   CGE 4.x   Mobilinux 4.x   Pro 5.0   CGE 5.x   Mobilinux 5.x   Mobilinux 5.0.24   MVL 5 Atom   Pro 5.0.24   MVL 5 OMAP3   MVL 5 OMAP3530   Carrier Grade CGE 6.0

CVE-2012-4565 CVE-2012-4508 CVE-2012-4444 CVE-2012-4423 CVE-2012-3524 CVE-2012-3511 CVE-2012-3509 CVE-2012-3417 CVE-2012-3401 CVE-2012-3400 CVE-2012-2333 CVE-2012-2319 CVE-2012-2313 CVE-2012-2141 CVE-2012-2131 CVE-2012-2123 CVE-2012-2111 CVE-2012-2110 CVE-2012-2100 CVE-2012-1667 CVE-2012-1182 CVE-2012-1165 CVE-2012-1164 CVE-2012-1146 CVE-2012-1097 CVE-2012-0884 CVE-2012-0879 CVE-2012-0840 CVE-2012-0815 CVE-2012-0814 CVE-2012-0061 CVE-2012-0060 CVE-2012-0053 CVE-2012-0044 CVE-2012-0038 CVE-2012-0031 CVE-2012-0029 CVE-2012-0028 CVE-2012-0027