CVE-2012-1173

CVE-2012-1173 describes multiple integer overflows in LibTIFF 3.9.4, specifically within the tiff_getimage.c file. These vulnerabilities, affecting the gtTileSeparate and gtStripSeparate functions, can be triggered by a specially crafted TIFF file with an invalid tile size, potentially leading to a heap-based buffer overflow and arbitrary code execution. The vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely with medium attack complexity, potentially resulting in partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.