Published: 16/05/2017 Updated: 04/11/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.2 can be exploited to corrupt memory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libraw libraw

LibRaw could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #864183 CVE-2017-6886 CVE-2017-6887 Package: src:libraw; Maintainer for src:libraw is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 4 Jun 2017 21:33:01 UTC Severity: grave Tags: security Fixed in ver ...

Hossein Lotfi and Jakub Jirasek from Secunia Research have discovered multiple vulnerabilities in LibRaw, a library for reading RAW images An attacker could cause a memory corruption leading to a DoS (Denial of Service) with craft KDC or TIFF file For the oldstable distribution (jessie), these problems have been fixed in version 0160-9+deb8u3 ...

An error within the "parse_tiff_ifd()" function (internal/dcraw_commoncpp) in LibRaw versions before 0182 can be exploited to corrupt memory ...

CWE-119 https://secuniaresearch.flexerasoftware.com/secunia_research/2017-5/https://secuniaresearch.flexerasoftware.com/advisories/75737/https://github.com/LibRaw/LibRaw/commit/d7c3d2cb460be10a3ea7b32e9443a83c243b2251 http://www.securityfocus.com/bid/98605 http://www.debian.org/security/2017/dsa-3950 https://usn.ubuntu.com/3492-1/https://nvd.nist.gov

CVE-2017-6886

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect