Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Suha Can

Researcher fromMSRC Vulnerabilities & Mitigations team
#25089of 53,632
9.8Total CVSS
Vulnerabilities · 1
PT-2016-7767
9.8
2016-11-22
None · Libtiff · CVE-2016-9533
**Name of the Vulnerable Software and Affected Versions** libtiff version 4.0.6 **Description** The issue is related to out-of-bounds write vulnerabilities in heap allocated buffers, specifically in the tif pixarlog.c file. This can lead to a heap-buffer-overflow, which has been reported as "PixarLog horizontalDifference heap-buffer-overflow." **Recommendations** For libtiff version 4.0.6, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.