Published: 12/02/2020 Updated: 14/02/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

LibTIFF prior to 4.0.4, as used in Apple iOS prior to 8.4 and OS X prior to 10.10.4 and other products, allows remote malicious users to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff

Debian Bug report logs - #809066 tiff: CVE-2015-7554 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 26 Dec 2015 21:24:02 UTC Severity: important Tags: patch, security, upstream Merged with 842043 Found in versi ...

Debian Bug report logs - #776185 tiff: CVE-2014-8127 CVE-2014-8128 CVE-2014-8130 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 25 Jan 2015 06:51:02 UTC Severity: important Tags: security, upstream Found in ver ...

USN-2553-1 introduced a regression in LibTIFF ...

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

William Robinet and Michal Zalewski discovered multiple vulnerabilities in the TIFF library and its tools, which may result in denial of service or the execution of arbitrary code if a malformed TIFF file is processed For the oldstable distribution (wheezy), these problems have been fixed in version 402-6+deb7u4 For the stable distribution (jes ...

CWE-787 https://bugzilla.redhat.com/show_bug.cgi?id=1185812 http://openwall.com/lists/oss-security/2015/01/24/15 http://support.apple.com/kb/HT204942 http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt http://support.apple.com/kb/HT204941 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809066 https://usn.ubuntu.com/2553-2/

CVE-2014-8128

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect