Intrusion PreventionLibTIFF.ExtractImageSection.Heap.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow Vulnerability in LibTIFF.
The vulnerability is due to lack of validation of user-supplied inputs. A remote attacker may exploit this vulnerability by enticing the victim to open a maliciously crafted .tiff file. Successful exploitation could lead to code execution under the security context of the user.
Affected Products
LibTIFF prior to and including 4.3.0
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 53349 |
| Created | Jul 04, 2023 |
| Updated | Jul 21, 2023 |
| Risk |
|
| CVE ID | CVE-2022-0891 |
| Exploit Prediction Score | 0.9% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |