Skip to content
OpenAdvisories
Unscored DSA-2698-1 2 CVEs

tiff - buffer overflow

Published Jun 18, 2013 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 tiff 3.9.4-5+squeeze9
Debian · 7 tiff 4.0.2-6+deb7u1

Vulnerabilities 2

  • Unscored —
    CVE-2013-1960 EPSS 12%

    Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remot…

  • Unscored —

    Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attack…