Exploit LibTIFF - 'td_stripbytecount' Null Pointer Dereference Remote Denial of Service

[Exploiter]

EDB-ID

14573

Проверка EDB

1. Пройдено

Автор

TOMAS HOGER

Тип уязвимости

DOS

Платформа

LINUX

CVE

cve-2010-2482

Дата публикации

2010-08-07

From: https://www.securityfocus.com/bid/41480/
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.

Versions up to and including libTIFF 3.9.4 are vulnerable. 

PoC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14573.tif.gz (lp589145-sample.tif.gz)