CVE-2019-12211
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.2%
When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow.
Produtos afetados
n/a · n/aReferências
https://lists.debian.org/debian-lts-announce/2019/12/msg00012.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUWVVP67FYM4GMWD7TPQ7C7JPPRUZHYE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZ7KBYPPNRMX7RRWVJSX4T63E3TFB6TG/https://seclists.org/bugtraq/2019/Dec/45https://security.gentoo.org/glsa/202107-02https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/https://usn.ubuntu.com/4529-1/https://www.debian.org/security/2019/dsa-4593