PT-2016-2789 · Libtiff+1 · Libtiff+1
Mei Wang
·
Publicado
2016-10-03
·
Atualizado
2019-04-10
·
CVE-2016-3625
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
LibTIFF versions 4.0.6 and earlier
Description
The issue allows a remote attacker to cause a denial of service via a crafted TIFF image. This is due to an out-of-bounds read in the
tif read.c file of the tiff2bw tool in LibTIFF.Recommendations
For LibTIFF versions 4.0.6 and earlier, consider disabling the
tiff2bw tool until a patch is available to prevent potential denial of service attacks. Restrict access to the tif read.c function to minimize the risk of exploitation. Avoid using the tiff2bw tool with untrusted TIFF images until the issue is resolved.Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Libtiff