CVE-2012-1173: libtiff Numeric Errors

EPSS trend

Probability

6.84%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

-0.08 pp

From 6.92% on 22-09-2026

22-09-202622-10-2026

EPSS score

6.84%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

35 links

lists.fedoraproject.org/pipermail/package-announce/2012-April/078835.htmlVendor AdvisoryX Refsource FEDORA
bugzilla.maptools.org/attachment.cgi?id=477&action=diffX Refsource MISC
hermes.opensuse.org/messages/14302713Vendor AdvisoryX Refsource SUSE
lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/48722Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.apple.com/kb/HT5503X Refsource CONFIRM
lists.fedoraproject.org/pipermail/package-announce/2012-April/077463.htmlVendor AdvisoryX Refsource FEDORA
www.osvdb.org/81025VDB EntryX Refsource OSVDB
rhn.redhat.com/errata/RHSA-2012-0468.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/48893Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 35 references

www.securitytracker.com/id?1026895VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/74656VDB EntryX Refsource XF
secunia.com/advisories/48757Third Party AdvisoryX Refsource SECUNIAVendor Advisory
home.gdal.org/private/zdi-can-1221/zdi-can-1221.txtX Refsource MISC
lists.fedoraproject.org/pipermail/package-announce/2012-April/078403.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/52891VDB EntryX Refsource BID
security.gentoo.org/glsa/glsa-201209-02.xmlVendor AdvisoryX Refsource GENTOO
lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlVendor AdvisoryX Refsource APPLE
www.mandriva.com/security/advisories?name=MDVSA-2012:054Vendor AdvisoryX Refsource MANDRIVA
support.apple.com/kb/HT5501X Refsource CONFIRM
ubuntu.com/usn/usn-1416-1Vendor AdvisoryX Refsource UBUNTU
bugzilla.maptools.org/show_bug.cgi?id=2369X Refsource CONFIRM
www.debian.org/security/2012/dsa-2447Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/48735Third Party AdvisoryX Refsource SECUNIAVendor Advisory
downloads.avaya.com/css/P8/documents/100161772X Refsource CONFIRM
secunia.com/advisories/48684Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/50726Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2012:0468Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=803078REPORT
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0468.jsonAdvisory
access.redhat.com/security/cve/CVE-2012-1173REPORT
www.cve.org/CVERecord?id=CVE-2012-1173Advisory
nvd.nist.gov/vuln/detail/CVE-2012-1173Advisory
security-tracker.debian.org/tracker/CVE-2012-1173Advisory

Related vulnerabilities

CVE-2018-5360debiantiff+31.82%8y ago14-01-2018 02:00LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.CVE-2018-10963alpinetiff+53.64%8y ago10-05-2018 02:00The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.CVE-2013-4231debiantiff+27.40%12y ago19-01-2014 15:00Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.CVE-2013-4243debiantiff+57.17%13y ago10-09-2013 19:00Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.CVE-2013-4232debiantiff+35.02%13y ago10-09-2013 19:00Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.CVE-2013-4244debiantiff+42.70%13y ago28-09-2013 19:00The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.

All vulnerabilities inlibtiff

CVE-2012-1173: libtiff Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References