PT-2019-5490 · Libtiff+2 · Libtiff+2
Thomas Bernard
·
Publicado
2019-02-09
·
Atualizado
2024-06-15
·
CVE-2019-7663
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
LibTIFF version 4.0.10
Description
A denial-of-service issue was discovered in the TIFFWriteDirectoryTagTransferfunction, affecting the cpSeparateBufToContigBuf function. This issue allows remote attackers to cause a denial-of-service via a crafted TIFF file. The vulnerability is related to an invalid address dereference and a buffer data boundary operation.
Recommendations
For LibTIFF version 4.0.10, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. As a temporary workaround, consider restricting the use of crafted TIFF files to minimize the risk of exploitation.
Exploit
Correção
Untrusted Pointer Dereference
Integer Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Libtiff
Suse
Ubuntu