PT-2017-1082 · Libtiff+2 · Libtiff+2
Brian Carpenter
+1
·
Publicado
2016-11-17
·
Atualizado
2024-06-15
·
CVE-2016-9297
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
LibTIFF version 4.0.6
Description
The issue is related to the TIFFFetchNormalTag function in the LibTIFF library, which is caused by an out-of-bounds operation on the stack. This can be exploited by a remote attacker using specially crafted files or tags, potentially leading to a denial of service due to out-of-bounds memory read. The exploitation may involve crafted TIFF SETGET C16ASCII or TIFF SETGET C32 ASCII tag values.
Recommendations
For LibTIFF version 4.0.6, consider updating to a newer version that addresses this issue, as using crafted tag values can lead to a denial of service. As a temporary workaround, consider restricting the use of the TIFFFetchNormalTag function or validating input files and tags to minimize the risk of exploitation.
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Libtiff
Suse
Ubuntu