CVE-2012-4564

CVE-2012-4564 describes a denial-of-service and potential arbitrary code execution vulnerability in the ppm2tiff utility, affecting various Linux distributions including Canonical, Debian, openSUSE, and Red Hat, as well as the libtiff library. This vulnerability stems from an unchecked return value in TIFFScanlineSize, leading to an integer overflow, zero-memory allocation, and a heap-based buffer overflow when processing a crafted PPM image. With a CVSS score of 6.8, this medium-complexity attack can be executed remotely without authentication, potentially resulting in partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.