CVE-2019-11459

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

Link	Resource
https://gitlab.gnome.org/GNOME/evince/issues/1129	Patch Third Party Advisory
https://usn.ubuntu.com/3959-1/	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LU4YZK5S46TZAH4J3NYYUYFMOC47LJG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJ6R7NMY44IHIQIY24CV3WV2GLGJPQPZ/
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00089.html
https://lists.debian.org/debian-lts-announce/2019/08/msg00013.html
https://lists.debian.org/debian-lts-announce/2019/08/msg00014.html
https://access.redhat.com/errata/RHSA-2019:3553
https://www.debian.org/security/2020/dsa-4624
https://seclists.org/bugtraq/2020/Feb/18

Configuration 1

cpe:2.3:a:gnome:evince:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

---

Published : 2019-04-22 10:29

Updated : 2020-08-24 05:37

---

NVD link : CVE-2019-11459

Mitre link : CVE-2019-11459

Enterprise Linux Server Tus

Redhat

CWE-754

CWE-908