Published: 29/06/2017 Updated: 22/03/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.8

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #866113 tiff: CVE-2017-9936: Memory leak in tif_jbigc can lead to DoS Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Jun 2017 12:42:02 UTC Severity: important Tags: fixed-upstream, p ...

Debian Bug report logs - #866611 tiff: CVE-2017-10688 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 30 Jun 2017 13:57:01 UTC Severity: important Tags: security, upstream Found in version tiff/408-2 Fixed in ...

Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code For the oldstable distribution (jessie), these problems have been fixed in version 403-123+deb8u4 For the stable distribution (stretch), these problems have been fixed in version ...

In LibTIFF 408, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwritec A crafted input will lead to a remote denial of service attack ...

Source: bugzillamaptoolsorg/show_bugcgi?id=2712 Triggered by "/tiffset POC1" $ /tiffset POC1 TIFFReadDirectory: Warning, Unknown field with tag 302 (0x12e) encountered TIFFReadDirectory: Warning, Unknown field with tag 61961 (0xf209) encountered poc3: AdobeDeflate compression support is not configured tiffset: tif_dirwritec:2127: ...

CWE-20 http://bugzilla.maptools.org/show_bug.cgi?id=2712 http://www.securityfocus.com/bid/99359 https://www.exploit-db.com/exploits/42299/http://www.debian.org/security/2017/dsa-3903 https://usn.ubuntu.com/3602-1/https://usn.ubuntu.com/3602-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/42299/

CVE-2017-10688

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect