PT-2017-8744 · Libtiff+4 · Libtiff+4

Published 2016-12-07 · Updated 2024-06-15 · CVE-2016-5652

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibTIFF (affected versions not specified)

Description A heap-based buffer overflow issue exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. This can be triggered by a crafted TIFF document, potentially leading to remote code execution. The issue can be exploited via a saved TIFF file delivered through various means.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CESA-2017_0225

CVE-2016-5652

DLA-693-1

DSA-3762-1

OPENSUSE-SU-2016_3035-1

OPENSUSE-SU-2024:10554-1

RHSA-2017:0225

RHSA-2017_0225

SUSE-SU-2016:3301-1

SUSE-SU-2018:1179-1

USN-3212-1

USN-3212-2

Affected Products

Centos

Libtiff

Red Hat

Suse

Ubuntu

References · 260

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0187 · Exploit
• https://bdu.fstec.ru/vul/2017-00883 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-5652 · Security Note
• https://ubuntu.com/security/CVE-2016-6223 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10271 · Security Note
• https://ubuntu.com/security/CVE-2016-5875 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3991 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00175 · Security Note
• https://ubuntu.com/security/CVE-2016-3623 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5652 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9532 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:3301-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9448 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10554-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9537 · Vendor Advisory