PT-2016-4578 · Libtiff+2 · Libtiff+2

Even Rouault

·

Publicado

2016-12-31

·

Atualizado

2018-12-23

·

CVE-2016-10094

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7
Description The issue is caused by an off-by-one error in the t2p readwrite pdf image tile function in tools/tiff2pdf.c. This error allows remote attackers to have an unspecified impact via a crafted image.
Recommendations For LibTIFF version 4.0.7, consider disabling the t2p readwrite pdf image tile function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2016-10094
DSA-3762-1
MGASA-2017-0199
OPENSUSE-SU-2018_4053-1
OPENSUSE-SU-2018_4256-1
SUSE-SU-2018:4008-1
SUSE-SU-2018:4120-1
SUSE-SU-2018:4191-1
USN-3212-1
USN-3212-2

Produtos afetados

Libtiff
Suse
Ubuntu