Published: 10/05/2017 Updated: 22/03/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote malicious users to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.6

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #809066 tiff: CVE-2015-7554 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 26 Dec 2015 21:24:02 UTC Severity: important Tags: patch, security, upstream Merged with 842043 Found in versi ...

Debian Bug report logs - #862929 CVE-2016-10371 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 18 May 2017 20:42:02 UTC Severity: important Tags: security Found in version tiff/407-6 Fixed in version tiff/407-7 ...

Debian Bug report logs - #866109 tiff: CVE-2017-9935: Heap-based buffer overflow in t2p_write_pdf Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Jun 2017 12:21:01 UTC Severity: grave Tags: fixed-upstream, sec ...

The TIFFWriteDirectoryTagCheckedRational function in tif_dirwritec in LibTIFF 406 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file ...

CWE-20 http://bugzilla.maptools.org/show_bug.cgi?id=2612 http://bugzilla.maptools.org/show_bug.cgi?id=2535 https://usn.ubuntu.com/3602-1/https://usn.ubuntu.com/3602-1/https://nvd.nist.gov

CVE-2016-10371

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect