PT-2017-8696 · Libtiff+3 · Libtiff+3
Andrej Nemec
·
Publicado
2017-02-06
·
Atualizado
2019-11-25
·
CVE-2016-5102
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
LibTIFF version 4.0.6
Description
The issue is related to a buffer overflow in the
readgifimage function in gif2tiff.c within the gif2tiff tool. This can be exploited by remote attackers using a crafted gif file, leading to a denial of service in the form of a segmentation fault.Recommendations
For LibTIFF version 4.0.6, consider updating to a newer version that addresses this issue, as the current version is affected by the buffer overflow in the
readgifimage function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Libtiff
Suse
Ubuntu