Published: 01/03/2017 Updated: 29/01/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote malicious users to cause a denial of service (crash) via a crafted TIFF file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.7

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code For the oldstable distribution (jessie), these problems have been fixed in version 403-123+deb8u4 For the stable distribution (stretch), these problems have been fixed in version ...

Debian Bug report logs - #866113 tiff: CVE-2017-9936: Memory leak in tif_jbigc can lead to DoS Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Jun 2017 12:42:02 UTC Severity: important Tags: fixed-upstream, p ...

Debian Bug report logs - #866611 tiff: CVE-2017-10688 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 30 Jun 2017 13:57:01 UTC Severity: important Tags: security, upstream Found in version tiff/408-2 Fixed in ...

Debian Bug report logs - #863185 tiff: CVE-2017-9147: Out of bound read in _TIFFVGetField Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 23 May 2017 04:54:02 UTC Severity: important Tags: fixed-upstream, securit ...

Debian Bug report logs - #850316 tiff: CVE-2016-10095: stack-based buffer overflow in _TIFFVGetField (tif_dirc) Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 5 Jan 2017 20:36:09 UTC Severity: important Tags: ...

Stack-based buffer overflow in the _TIFFVGetField function in tif_dirc in LibTIFF 407 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file ...

A stack-based buffer overflow vulnerability was found in libtiff, in the _TIFFVGetField function in tif_dirc, when running tiffslpit on crafted tiff file ...

CWE-119 https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/http://www.openwall.com/lists/oss-security/2017/01/01/7 http://www.openwall.com/lists/oss-security/2017/01/01/11 http://bugzilla.maptools.org/show_bug.cgi?id=2625 http://www.securityfocus.com/bid/95178 http://www.debian.org/security/2017/dsa-3903 https://nvd.nist.gov https://www.debian.org/security/./dsa-3903

CVE-2016-10095

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect